last executing test programs: 13m14.400251547s ago: executing program 32 (id=247): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x121c91e, &(0x7f0000000000), 0x4, 0x4f4, &(0x7f00000006c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x2, 0x9, 0x9, 0x9}]}) ioprio_set$pid(0x2, 0x0, 0x0) r0 = io_uring_setup(0x1b3b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 13m9.992983452s ago: executing program 33 (id=309): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c00000010000104000000000000000021af4226bfe161951999d9db56c927ce9b439f740a318f525c6a6ff373c9cab51721d965ea94a1d647a6f29b9eeb91597cbe3140f140aedc0fc42034e76dfd4d8e1f3d167558b57995c5562d6985ce011a648690245622c2f741c8c5058dc9e00bcf66915a21e9e0324f98a91a519d3f14564a2a24543302927d9dcd46817678d348f2bd369a766f6796259b6f65de65f1df594fda9de75877a4dcf9295a74372563c94e34c260ea1b237ae87ff32d7a2f3d2d35344ae65ff2449471bbc11ddd65", @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r5, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x6c, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x400, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfe}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x6]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000114) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r7, 0x8931, &(0x7f0000000140)="b43a") sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e002c4788031c09102c28", 0x12, 0x4, &(0x7f0000000000)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) 12m8.434710767s ago: executing program 34 (id=1128): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x40840) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) r4 = getpid() mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0xa08410, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cbef"], 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0xffffffffffff4bb4, 0x403) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000240)=""/152) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 11m52.113741245s ago: executing program 35 (id=1636): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003680)}, 0x40012022) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, @perf_config_ext, 0x800, 0x7ff, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r2, 0x731, 0x0, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x44) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 10m58.158783837s ago: executing program 36 (id=2729): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r1, &(0x7f0000000680)='.\x00', 0x0, 0x0, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 10m57.004863594s ago: executing program 37 (id=2739): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b6"], 0xe) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_tgsigqueueinfo(r0, r0, 0x19, &(0x7f00000000c0)={0x4, 0x3ff, 0x7}) 7m4.160007884s ago: executing program 38 (id=6236): r0 = socket(0xa, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000063010200000000009500003993074ec9eccfd0c2ea31958e511b210000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x3, @mcast1, 0xff56}, 0x18) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000040)) 6m18.177322933s ago: executing program 39 (id=7124): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=0x0], 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b7398bf}, 0x8040) 5m43.823604068s ago: executing program 40 (id=7717): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) capset(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000900)={[{@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {}, {@fat=@tz_utc}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@gid}, {@fat=@fmask={'fmask', 0x3d, 0x3511}}, {@fat=@gid}, {@fat=@check_normal}, {@nodots}, {@fat=@nfs}, {@fat=@usefree}]}, 0xfd, 0x1d0, &(0x7f0000000a80)="$eJzs3UFr02AYB/CnWV1TT7sJohDwstNQP8FEJogBQelBTwrTyyaCu0Qv28fwA/oBZKdeJDKTLS56yKJtav39Ln3S//s2z1tK2kvfvLr17mD//dHbLzc+R5qOItmN3ZiPYiuSOHcSAMA6mZdlfC0rQ/cCACxHh+//b0tuCQBYsOcvXj55kOd7z7IsjTg9KWbFrHqs8keP87272Q9bzazTophtXOT3svZvh7P8Wlyv8/vV/Oxyvhnbd6r8LHv4NG/lk9hf7NIBAAAAAAAAAAAAAAAAAAAAAGAwtyM799v9fXZ22vm0zqujn/YHau3fM46b4/qw2R6oPF7GogAAAAAAAAAAAAAAAAAAAOAfc/Tx08Hrw8M3H5piEhGXn7lKMapfuOf0fsX2NKJHq+MBWl2FIlmNNq5cbHQdnP3RuZK/1nPPj9ZmRCzqPZyXZdlpcHONmAxyZQIAAAAAAAAAAAAAAAAAgP9P86ffX7N0iIYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYADN/f97FMcR0WHwxcmmgy4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANfY9AAD//yQlMFE=") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa1551, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_bp={0x0, 0x4}, 0x101280, 0x26f, 0x6, 0x6, 0x4, 0x20005, 0xa5b, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x8000000a}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48) 4m45.110343617s ago: executing program 41 (id=8708): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x88, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25a51027}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x493c1927}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 4m37.796642561s ago: executing program 42 (id=8811): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8e4) (fail_nth: 1) 3m46.040286687s ago: executing program 3 (id=9712): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 3m46.021029608s ago: executing program 3 (id=9713): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) 3m45.97113647s ago: executing program 3 (id=9716): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x25a51027}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3m45.926903023s ago: executing program 3 (id=9717): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0xa6a4b5, &(0x7f00000012c0)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="61722b26b3fa26ec935d0845287ac3dcf232dd183e1c6fa535f9ad4eb04b6e9e3ace74460ffec40f4ebd7f0852", @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) 3m45.762906243s ago: executing program 3 (id=9721): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xa85, 0xf) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1f, 0x5, &(0x7f0000000480)=ANY=[@ANYRESHEX=r5], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1d, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x4004) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pwrite64(r2, 0x0, 0x0, 0x9000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100582e00000c0004400000000000000008140000001100010000000000040000000300000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a0101000f1700000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) 3m45.591534622s ago: executing program 3 (id=9723): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 3m45.591453442s ago: executing program 43 (id=9723): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 3m3.196903644s ago: executing program 8 (id=10175): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x800}, 0x8, 0x0, 0x2, 0x48000000, 0xffffffff, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x8e9e, 0x7, 0x1f94) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x23, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)="ebb20e140200a2e5d4559abe6f70bb8b871c51dc7252d1479d55bd16fe37834aa238705db2a0fc4be197727b852b3720161a63bd0ad8f7d41ec42fa4f8b4dcab32080ca89293b84ad2b649b0e29317ded1f1f4fa3ef6f7f486ca63ea72eb318cfd091dcf980a1f184661b758262d1a13d9435efa48005b904c9c592389ebc60a76db671ae9e5b8b3150647515716c4b7063987d25e14194b89d557db19c1e0249b7ea67114b041f073440e96425846ef50ffa6dd75d342516461aaf8b8613544fe29c8f2a2d12e45bc17a5", 0xcb}, {&(0x7f0000000480)="56d36e55a1a1a5e1a5e1cce62892ef00ee24ef81abba7cf6f4c628012cfe10ef87607c4e4cbf6c3e142923c0bdfc183bf4edadfb85ad64ce966d2fe3004057c5af5c", 0x42}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="1c000000000000000100000008000000", @ANYRES32=r5, @ANYBLOB="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"], 0x168}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x10, 0x10, 0x0, 0x0, 0x4, 0x0, 0x7, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f00000007c0)) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x10, 0x2, {0x8}}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x50}}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r3, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb17cfe4acd3a98e3e2b000000004ef2b8e4fff8a3be978b94b8a6c2f345d98ef5e8df0695620b81a51badebba", 0x2d}, {&(0x7f00000009c0)="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", 0x580}], 0x2}}], 0x2, 0x40) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000147dc38e883d164e0e262e565c3c5a00000095000000000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) 3m2.319827957s ago: executing program 8 (id=10186): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1f}}) 3m1.233024391s ago: executing program 8 (id=10204): openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) (async) r0 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="3000000000000000840000000100000000000000040000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 3m0.840490165s ago: executing program 8 (id=10206): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) syz_io_uring_setup(0x3921, &(0x7f0000000080)={0x0, 0x83f, 0x800, 0x6, 0x10e}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00') 3m0.75210357s ago: executing program 8 (id=10207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x50) (async) r2 = socket$inet(0x2, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r8], 0x44}}, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2, 0x2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaeaaa0d08024508001c000300000001907864010300ac1414aa0d009078fffe0009"], 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = syz_open_dev$sg(&(0x7f00000002c0), 0x32a, 0x240) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x9, 0x0, @buffer={0x0, 0xd6, &(0x7f0000000640)=""/214}, &(0x7f00000001c0)="085a28717e61bf6ee3", 0x0, 0x300, 0x0, 0x8000, 0x0}) (async) r13 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r13, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0xfffffff3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000000000000010000000c"], 0x30}, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) pread64(r4, &(0x7f00000003c0)=""/64, 0x40, 0x7) sendto$packet(r12, &(0x7f0000000300)="3c8695c879ad71b4f9ee33d8c35309c8987423b8ed65bc41abda01f5ec3a8b04443cd3feb714af9e9163e4d21bee4fa6b7d3b4b8123219a812636838c988be46a8eb667634c34101", 0x48, 0x80, &(0x7f0000000240)={0x11, 0x8, r8, 0x1, 0x8, 0x6, @remote}, 0x14) (async) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0x7, &(0x7f0000000500)={0x2, 0x3ff, 0x3, 0x772d}, 0x10) (async) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r4) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r14, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) 3m0.548876922s ago: executing program 8 (id=10210): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb08"], 0x44}, 0x1, 0x2}, 0x40000) 3m0.526246713s ago: executing program 44 (id=10210): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb08"], 0x44}, 0x1, 0x2}, 0x40000) 2m27.163294416s ago: executing program 6 (id=10687): r0 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000001c0)) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r1, 0x0) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e22, @multicast1}, 0x10) 2m26.984204236s ago: executing program 6 (id=10691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0xffffffff, {0x2}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20008020}, 0x40) 2m26.981996976s ago: executing program 6 (id=10694): syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r1}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x1000000, r5}, 0x10) 2m26.790712427s ago: executing program 6 (id=10696): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000009c0)={&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/26, 0x1a}, {&(0x7f00000008c0)=""/68, 0x44}], 0x3, &(0x7f0000000980)=""/52, 0x34}, 0x20) r1 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "d80b8d", 0x0, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40), &(0x7f0000000a80), 0x2, 0x3) r5 = syz_clone(0x4040000, &(0x7f0000000200), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sched_getattr(r5, &(0x7f0000000700)={0x38}, 0x38, 0x0) mremap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000, 0x4, &(0x7f0000ff7000/0x2000)=nil) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x3, 0xee01, 0xffffffffffffffff, r2, r4, 0x0, 0x400}, 0xfffffffc, 0x100, 0x9, 0x0, r5, r6, 0x9}) r7 = geteuid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x7, r2}, {0x2, 0x3, r2}, {0x2, 0x4, r3}, {0x2, 0x3, r2}, {0x2, 0x0, r3}, {0x2, 0x6, r2}, {0x2, 0x4, r3}, {0x2, 0x5, r2}, {0x2, 0x2, r7}, {0x2, 0x0, r7}], {0x4, 0x4}, [], {}, {0x20, 0x6}}, 0x74, 0x3) chmod(&(0x7f00000004c0)='./file1\x00', 0x138) 2m26.621035288s ago: executing program 6 (id=10701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 2m26.374459173s ago: executing program 6 (id=10703): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r3, 0xfffffffffffffffe, 0x2, 0x0) (async) waitid(0x2, r3, 0xfffffffffffffffe, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) openat$cgroup_subtree(r4, &(0x7f0000000380), 0x2, 0x0) (async) r5 = openat$cgroup_subtree(r4, &(0x7f0000000380), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)="ba", 0x1}, {0x0}], 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c77666400003d84ec70d13d7d3e98393a1cf85e168cdbcc64a85454ca112918e4b87ec3435e7189301bc5502cc09c36875e8b5e91bd4c4e42eb32a8a2366b1b49d8284cd492ecf84a80e707a647add309e5abd13768bcad5fe2a263e4c3ab6ce138c2d752d7375e3fd0bcc041a227be5e3f685469c791deb16b8994220f6bc0599b17e904ffaaaf6c47d1be11dd6ed6f2be195c4a31aa52b08d63879ca266b18fd76d268062b3028e9409ec86bdf40d35aacfe4aff2790aadcdff35c7704dac5b3ebb2ee38b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000140)) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000340)={0x22, 0x7, 0xf, 0x2, 0x1}, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) 2m26.343470284s ago: executing program 45 (id=10703): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r3, 0xfffffffffffffffe, 0x2, 0x0) (async) waitid(0x2, r3, 0xfffffffffffffffe, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) openat$cgroup_subtree(r4, &(0x7f0000000380), 0x2, 0x0) (async) r5 = openat$cgroup_subtree(r4, &(0x7f0000000380), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde605cbeac671e8e8fdecb035865e362ead91b1979a5ae30705b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd21142525815b91076ccb7b37b41215c184e731fb13d100323b77f613af02b6f3259d6f3ac85da4fe304ecfca2be5f4a8b3910a8f0a88d082ac161c4a3c1132831a88f199f67aca8f4698996d076250b2b75cdc7776b8cab72716149f70efb190007832c6077da0df4c63a226284cd6a2e5ec5bb28f18dd44821065b9758fd159c490421901361244c01bfa0cddbc726f2b4ceace9f9309f507e6a7135b33f418af0a63bfb480c2feced947dae1d7dc19c4f1807b17c559c27be4d18b2e0a3cf26832d7fc97cea307de1852f90317b501bf66473eb6dac986d7b5682abc3a5ea1dabde56b9e3a56ba20a65dc0df39edd5f34ed22a8f0c6594a894901e455d0369e407dae0f4fb4e181415153000000b6b384cb4bbfd4edfd70cd7324de228e1047a61292abe63fc71063a9040bd927779d56ef0f4725dfb3822ce1e24632f7d51a0e65bd5664fcd3e4a0b0388b842115b5689769438f9763a55956288e78b6cad0ff3f310722b4a5cc4f25a69753fcc8ece189808e6f2f71ca2337d0de3a9feaa3f4cd2a2c69d21daec3751aca69f0a6f5b0af65aace6d04dad91c67e57a0f7b8accb3f8d9b787e002e56a7149c2d10a268884e695256ddb9c17853e29689f41667522e6932294"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r7, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f00000002c0)="ba", 0x1}, {0x0}], 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c77666400003d84ec70d13d7d3e98393a1cf85e168cdbcc64a85454ca112918e4b87ec3435e7189301bc5502cc09c36875e8b5e91bd4c4e42eb32a8a2366b1b49d8284cd492ecf84a80e707a647add309e5abd13768bcad5fe2a263e4c3ab6ce138c2d752d7375e3fd0bcc041a227be5e3f685469c791deb16b8994220f6bc0599b17e904ffaaaf6c47d1be11dd6ed6f2be195c4a31aa52b08d63879ca266b18fd76d268062b3028e9409ec86bdf40d35aacfe4aff2790aadcdff35c7704dac5b3ebb2ee38b", @ANYRESHEX=r1, @ANYBLOB=',\x00']) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000140)) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000340)={0x22, 0x7, 0xf, 0x2, 0x1}, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) 2m19.240083796s ago: executing program 7 (id=10798): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x1, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 2m18.415066926s ago: executing program 7 (id=10808): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, 0x0, 0x4000) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r3, 0x0) timer_gettime(r3, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'syzkaller0\x00'}, {0x20, 'drr\x00'}, {0x20, 'flower\x00'}], 0xa, "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"}, 0x122) r9 = socket(0x11, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m18.237223726s ago: executing program 7 (id=10811): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7800, 0x707, 0x7, 0xff, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast1, @loopback, {[@generic={0x94, 0x3, 'W'}, @timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x7, [{@private=0xa010100, 0xe0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2b, 0x0, [{0x0, 0x10, "395c296979b4eb8aa19fb6c5f59b"}, {0x2, 0x6, "2e703fc9"}, {0x6, 0x3, "f1"}, {0x6, 0xc, "17649ac20b0efeaf59ad"}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x56, r3}) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@journal_dev={'journal_dev', 0x3d, 0x8e0}}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000280), &(0x7f0000000140)=r4}, 0x22) sendmsg$inet(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)='U', 0x1}], 0x1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10839a, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000001, 0xffffffffffffffff, 0x0) pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000002c0)={{0x5, 0x62}, {0x6, 0x7}, 0xd2, 0x2, 0x5}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000001c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xfee, &(0x7f0000002500)=""/4078, 0x41100, 0x40}, 0x94) 2m17.599894094s ago: executing program 7 (id=10817): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000009c0)={&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/26, 0x1a}, {&(0x7f00000008c0)=""/68, 0x44}], 0x3, &(0x7f0000000980)=""/52, 0x34}, 0x20) shmget(0x1, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "d80b8d", 0x0, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40), &(0x7f0000000a80), 0x2, 0x3) r3 = syz_clone(0x4040000, &(0x7f0000000200), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sched_getattr(r3, &(0x7f0000000700)={0x38}, 0x38, 0x0) mremap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000, 0x4, &(0x7f0000ff7000/0x2000)=nil) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x7, r1}, {0x2, 0x3, r1}, {0x2, 0x4, r2}, {0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x6, r1}, {0x2, 0x4, r2}, {0x2, 0x5, r1}, {0x2, 0x2}, {}], {0x4, 0x4}, [], {}, {0x20, 0x6}}, 0x74, 0x3) chmod(&(0x7f00000004c0)='./file1\x00', 0x138) 2m17.204925137s ago: executing program 7 (id=10821): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, 0x0, 0x4000) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r3, 0x0) timer_gettime(r3, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'syzkaller0\x00'}, {0x20, 'drr\x00'}, {0x20, 'flower\x00'}], 0xa, "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"}, 0x122) r9 = socket(0x11, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m16.515252338s ago: executing program 7 (id=10831): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000009c0)={&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/26, 0x1a}, {&(0x7f00000008c0)=""/68, 0x44}], 0x3, &(0x7f0000000980)=""/52, 0x34}, 0x20) shmget(0x1, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "d80b8d", 0x0, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40), &(0x7f0000000a80), 0x2, 0x3) r3 = syz_clone(0x4040000, &(0x7f0000000200), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sched_getattr(r3, &(0x7f0000000700)={0x38}, 0x38, 0x0) mremap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000, 0x4, &(0x7f0000ff7000/0x2000)=nil) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x7, r1}, {0x2, 0x3, r1}, {0x2, 0x4, r2}, {0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x6, r1}, {0x2, 0x4, r2}, {0x2, 0x5, r1}, {0x2, 0x2}, {}], {0x4, 0x4}, [], {}, {0x20, 0x6}}, 0x74, 0x3) chmod(&(0x7f00000004c0)='./file1\x00', 0x138) 2m16.31420003s ago: executing program 46 (id=10831): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000009c0)={&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/26, 0x1a}, {&(0x7f00000008c0)=""/68, 0x44}], 0x3, &(0x7f0000000980)=""/52, 0x34}, 0x20) shmget(0x1, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "d80b8d", 0x0, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40), &(0x7f0000000a80), 0x2, 0x3) r3 = syz_clone(0x4040000, &(0x7f0000000200), 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sched_getattr(r3, &(0x7f0000000700)={0x38}, 0x38, 0x0) mremap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x2000, 0x4, &(0x7f0000ff7000/0x2000)=nil) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x7, r1}, {0x2, 0x3, r1}, {0x2, 0x4, r2}, {0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x6, r1}, {0x2, 0x4, r2}, {0x2, 0x5, r1}, {0x2, 0x2}, {}], {0x4, 0x4}, [], {}, {0x20, 0x6}}, 0x74, 0x3) chmod(&(0x7f00000004c0)='./file1\x00', 0x138) 2m13.885520435s ago: executing program 0 (id=10866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c30081ff18000222fc646dfa91b5e6d7ad16053983fcfe85f6bfb53e996db61a762467e85d6599ad7bdbc80659470a0bfc5ecbaec9e58c71d01bc197f296a9bb470523b40928bcda8f2de12f75250b8c5e62d5aff5aff41edbdbad335f8085b0efc9ed8b3f438a5da74c41a159ff891711e43bf8d18b31777a42a0b2d78c"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x12, r2, 0x80000000) 2m13.830373088s ago: executing program 0 (id=10867): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x10, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x808, 0x10000, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) 2m13.777580271s ago: executing program 0 (id=10868): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000b6c545190000001103000000000000000300000000000004000000000000000001000084000000000000002efb2d7fb20b7e2e00"], 0x0, 0x51}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb0000005000000095d738b7dbdac9c1"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private, @in=@initdev}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) io_uring_enter(r1, 0x2219, 0x7724, 0x16, 0x0, 0x13) 2m12.767911841s ago: executing program 0 (id=10877): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) getsockname$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fe10000000000000feffffff850000001100000085000000500000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1904, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x7ff, 0x0, 0x1}) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x1c, 0x40800) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000300)=@IORING_OP_SHUTDOWN={0x22, 0x5d, 0x0, r5, 0x0, 0x0, 0x2, 0x0, 0x1, {0x0, r6}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000280)='./file1\x00') 2m12.767349201s ago: executing program 0 (id=10878): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000180)='./bus\x00', 0x7100027e) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m12.44509162s ago: executing program 0 (id=10879): syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) socket(0x28, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0100000010002000d229e5562ad0b98a", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24002010) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='X', 0x1}], 0x1}}], 0x1, 0x0) 2m12.419173352s ago: executing program 47 (id=10879): syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) socket(0x28, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000500)='\t!~&\x00\xaeH\xfc\xf7\xf7\xd4\x1c\x94\xcb\r^\xd6<\xda9\xdc\xac(\x8cj\x13hk\xfc\xa8\v#)\xddk\x93\x12\xbfh\x95\xb9\xb7-:\xebr\xf2%\xaf\x8fH\x89MO\xf7\xbe\x1b\xd7\xd7S\b\x00\x00\x00\x00\x00\x00') sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0100000010002000d229e5562ad0b98a", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x24002010) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='X', 0x1}], 0x1}}], 0x1, 0x0) 3.501090232s ago: executing program 2 (id=12249): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014006042400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x22, 0x2, 0x21) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0xa0, 0x0, 0x0, 0x1, 0x480283, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x7606, 0x3ff, 0x200000, 0x3, 0xfffffffffffffffd, 0xf0d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x9, 0x8, 0xb, 0xf7, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x80000000}, 0x10842, 0x0, 0x80000001, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071101400000000009500000700000000a425f8e8c17270231f92394c95540348156c9fd1fe6380cb460edb08ff7489bee864987b2042ef8eb2a30a9c3f1e9e9dfcc575e53c7bc51a30f3c90f718a082b76d79137ac87444fe847ca5b7583b11df467348d5ef14c51306e52709d7515579150bd747bd5326652c7c8cf506f762dce949021a6586d88496504285419f79850"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x66, &(0x7f00000002c0)=""/102, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x12, 0x9409, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, r1, r1], &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x6}, {0x3, 0x1, 0x8}, {0x5, 0x2, 0xb, 0xb}, {0x2, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) 2.318010092s ago: executing program 2 (id=12262): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) socket$kcm(0x10, 0x6, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1}, 0x8004, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x9bff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) 2.148070432s ago: executing program 4 (id=12264): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="0040230c1100"}) 2.147476122s ago: executing program 5 (id=12265): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x31) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}]}}]}, 0x58}}, 0x40) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)='{', 0x1}], 0x1}}], 0x1, 0xc0) 2.124273964s ago: executing program 2 (id=12267): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') 2.066951617s ago: executing program 9 (id=12268): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.066363927s ago: executing program 4 (id=12270): r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)=""/167, 0xa7}], 0x1}, 0x100) 2.062321847s ago: executing program 5 (id=12271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0000000029cf00000000000000000000000000000000030000000000"], 0x50) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x32}, 0x28) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000)=r5, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa6f, 0x140, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffff8001, 0x4000000000}, 0x10e0a6, 0xac5d, 0x0, 0x2, 0x1}, 0x0, 0xfffffffffffeffff, r6, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0xfffffffffffffffd}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f09f004be0ffff00124000632f77fbac141416ac14141607089f034d2f87e5440c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0x8002, 0x60000000}, 0x50) 2.01921013s ago: executing program 2 (id=12272): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 1.998881881s ago: executing program 4 (id=12273): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1.952169894s ago: executing program 4 (id=12274): sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, 0x0}, 0x0) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) 1.927546775s ago: executing program 5 (id=12275): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x2d, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, 0x0, 0x0, 0x8}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x102) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, 0x0, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2a, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="d31502d102d290d9f433c94e3a75a266cfed5f", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'hsr0\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x40400d5) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, 0x0, 0xff00) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.839928821s ago: executing program 4 (id=12276): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000001900000004000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0800, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001000)=""/4090, 0xffa}, {&(0x7f0000000100)=""/193, 0xc1}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000780)=""/225, 0xe1}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000f00)=""/229, 0xe5}], 0x7}, 0x40002102) perf_event_open(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000002040), 0x0}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@generic={0x1e, "d31dde0ca79aa50c68b47e2e0733d610b543accfbdac2483d05e1643c54451fcb7f3196ad4101fce1196d14b21e3ca83fa7323bb3da8a62f55fb6051615f2a76bcef82dffeda07531e2d753eceb7af202c20dd888f47199ef124eebd359e328de39121b6b2f0348f5eac19ac929c19830f9061ba8191bacd3055dcde1420"}, 0x80, 0x0}, 0xc5) socket$kcm(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffd, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) 1.839322051s ago: executing program 9 (id=12277): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 1.156271181s ago: executing program 1 (id=12278): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.099325795s ago: executing program 1 (id=12279): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)=ANY=[], 0x50) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000400000000000012000000000300000000000008010000000000000000000002"], 0x0, 0x44}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 972.228952ms ago: executing program 1 (id=12280): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a", 0x2}], 0x1}, 0x2004fffe) 964.206163ms ago: executing program 1 (id=12281): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x31) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable', 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}]}}]}, 0x58}}, 0x40) sendmmsg$inet(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)='{', 0x1}], 0x1}}], 0x1, 0xc0) 762.178805ms ago: executing program 9 (id=12282): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x30040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000440), 0x3d) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x815) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) 661.020741ms ago: executing program 9 (id=12283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 603.954195ms ago: executing program 9 (id=12284): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="9e2421b52ee7c7b1b03641789b51ca37bdba26a8b4b1f6c23d8507d99fe2295af7848c2a4521d2b85218a2e80863000000"], 0x0, 0x9, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000804000000bb7f1a007600feff000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 523.517359ms ago: executing program 2 (id=12285): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xf410b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0bb9e1984efcc0eeea796aa5db82a11ccba78af674", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100), 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x0, 0x2}, 0x100678, 0xc8, 0x80000001, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x775}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, &(0x7f0000000040)=ANY=[], 0x0, 0x49, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x30040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r3) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x815) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) r5 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x28, 0x8, 0x0, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) 473.112412ms ago: executing program 4 (id=12286): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a8", 0x31}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r1, 0x29, 0x39, &(0x7f0000000100)=r2, 0x120) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, r2, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r4}) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@isdn={0x22, 0xa5, 0x66, 0x7, 0xf9}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b4aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae1000000004e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa85320f9d5beea2370b8c0533c19422c9097a7164651ad9d8f9cca4ea7815e53fd9c42eab1cb76b451cd3b18cf31c16d01731efd1506b844f52d2f173c825a7f8814ada5f6361a48f20250df6b98965d0c85f3df3b72b2ac49f3ed52e6fa30d7d3d54d95e8bd13ec2ed4883feb3b778d624ff0c1a3ec900671acd0ff00edc7b96d1cad51fba25565c67ce0e62302dbff8f68c0de8330c44704b2f019a7afc753538ed61f3744f286735af18a8f5e7ae3fd66e4562565b31a9e5d947a06ea69ee5f0ea97d2e832e1bbc9e74498a2f99473ef8822ad0254013fefff6c4c35d84072307633de00985a6477ff6480e75", 0x2ab}], 0x2}, 0x40004) r6 = socket$kcm(0x2, 0x5, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x43, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0xa000000) sendmsg$inet(r5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400a000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x8010) 416.150205ms ago: executing program 5 (id=12287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000000140)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000dc0)={0xe0000000, 0x9}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x113, 0x0, 0x2, 0xb, 0xa7, 0x6, 0x1000002, 0x1}) 410.845276ms ago: executing program 1 (id=12288): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000100000000000053c8d1d90d4b5752f8b5e997d4efa53cb48b7a1503bb15be2fd58d09f817612353eb7c14ceb6fd0ecd", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x20000884) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x10628, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 168.16211ms ago: executing program 9 (id=12289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 115.030063ms ago: executing program 5 (id=12290): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 73.931786ms ago: executing program 5 (id=12291): socket$kcm(0xa, 0x3, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 67.608736ms ago: executing program 2 (id=12292): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 0s ago: executing program 1 (id=12293): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(0x0, 0x7) kernel console output (not intermixed with test programs): dump_stack_lvl+0x95/0xd0 [ 736.386729][ T8326] dump_stack+0x15/0x1b [ 736.386749][ T8326] should_fail_ex+0x263/0x280 [ 736.386789][ T8326] should_failslab+0x8c/0xb0 [ 736.386821][ T8326] kmem_cache_alloc_noprof+0x68/0x490 [ 736.386866][ T8326] ? mb_cache_entry_create+0xf0/0x540 [ 736.386911][ T8326] mb_cache_entry_create+0xf0/0x540 [ 736.387023][ T8326] ext4_xattr_get+0x298/0x470 [ 736.387098][ T8326] ? _parse_integer+0x27/0x40 [ 736.387156][ T8326] ext4_xattr_security_get+0x32/0x40 [ 736.387188][ T8326] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 736.387223][ T8326] __vfs_getxattr+0x2ad/0x2c0 [ 736.387252][ T8326] cap_inode_need_killpriv+0x2e/0x50 [ 736.387283][ T8326] security_inode_need_killpriv+0x32/0x60 [ 736.387366][ T8326] notify_change+0x3dd/0x8f0 [ 736.387406][ T8326] chown_common+0x300/0x430 [ 736.387438][ T8326] ksys_fchown+0xbc/0x110 [ 736.387488][ T8326] __x64_sys_fchown+0x3f/0x50 [ 736.387520][ T8326] x64_sys_call+0x8c2/0x3000 [ 736.387566][ T8326] do_syscall_64+0xc0/0x2a0 [ 736.387607][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.387630][ T8326] RIP: 0033:0x7f2d31cdaeb9 [ 736.387646][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.387666][ T8326] RSP: 002b:00007f2d30737028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 736.387766][ T8326] RAX: ffffffffffffffda RBX: 00007f2d31f55fa0 RCX: 00007f2d31cdaeb9 [ 736.387781][ T8326] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000004 [ 736.387794][ T8326] RBP: 00007f2d30737090 R08: 0000000000000000 R09: 0000000000000000 [ 736.387867][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.387908][ T8326] R13: 00007f2d31f56038 R14: 00007f2d31f55fa0 R15: 00007ffcbf691fd8 [ 736.387989][ T8326] [ 736.642251][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.656674][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.720967][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11152'. [ 736.751786][ T8345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8345 comm=syz.5.11150 [ 736.766234][ T8348] netlink: 'syz.1.11152': attribute type 4 has an invalid length. [ 736.873276][ T8356] FAULT_INJECTION: forcing a failure. [ 736.873276][ T8356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.888397][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.5.11156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 736.888431][ T8356] Tainted: [W]=WARN [ 736.888439][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.888503][ T8356] Call Trace: [ 736.888509][ T8356] [ 736.888518][ T8356] __dump_stack+0x1d/0x30 [ 736.888551][ T8356] dump_stack_lvl+0x95/0xd0 [ 736.888581][ T8356] dump_stack+0x15/0x1b [ 736.888608][ T8356] should_fail_ex+0x263/0x280 [ 736.888686][ T8356] should_fail+0xb/0x20 [ 736.888752][ T8356] should_fail_usercopy+0x1a/0x20 [ 736.888787][ T8356] _copy_to_user+0x20/0xa0 [ 736.888811][ T8356] simple_read_from_buffer+0xb5/0x130 [ 736.888871][ T8356] proc_fail_nth_read+0x10e/0x150 [ 736.888910][ T8356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 736.888947][ T8356] vfs_read+0x1ab/0x7f0 [ 736.889017][ T8356] ? __rcu_read_unlock+0x4e/0x70 [ 736.889104][ T8356] ? __fget_files+0x184/0x1c0 [ 736.889128][ T8356] ? mutex_lock+0x57/0x90 [ 736.889182][ T8356] ksys_read+0xdc/0x1a0 [ 736.889246][ T8356] __x64_sys_read+0x40/0x50 [ 736.889332][ T8356] x64_sys_call+0x2889/0x3000 [ 736.889402][ T8356] do_syscall_64+0xc0/0x2a0 [ 736.889525][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.889551][ T8356] RIP: 0033:0x7f207e91b78e [ 736.889579][ T8356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 736.889601][ T8356] RSP: 002b:00007f207d3b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 736.889629][ T8356] RAX: ffffffffffffffda RBX: 00007f207d3b76c0 RCX: 00007f207e91b78e [ 736.889713][ T8356] RDX: 000000000000000f RSI: 00007f207d3b70a0 RDI: 0000000000000007 [ 736.889730][ T8356] RBP: 00007f207d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 736.889818][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.889835][ T8356] R13: 00007f207ebd6038 R14: 00007f207ebd5fa0 R15: 00007ffe104e48b8 [ 736.889862][ T8356] [ 737.143999][ T8354] loop2: detected capacity change from 0 to 512 [ 737.161685][ T8354] EXT4-fs: test_dummy_encryption option not supported [ 737.211263][ T8364] loop2: detected capacity change from 0 to 512 [ 737.236422][ T8364] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 737.368389][ T8368] loop5: detected capacity change from 0 to 512 [ 737.376066][ T8368] journal_path: Non-blockdev passed as './bus' [ 737.382975][ T8368] EXT4-fs: error: could not find journal device path [ 737.550262][ T8373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65280 sclass=netlink_xfrm_socket pid=8373 comm=syz.5.11161 [ 737.635462][ T8381] 8021q: VLANs not supported on ip_vti0 [ 738.372244][ T8391] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 738.382470][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 738.382515][ T29] audit: type=1400 audit(2000000062.400:35793): avc: denied { relabelto } for pid=8390 comm="syz.2.11168" name="NETLINK" dev="sockfs" ino=137188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 739.480156][ T8397] smc: net device bond0 erased user defined pnetid SYZ0 [ 739.512159][ T8406] loop5: detected capacity change from 0 to 1024 [ 739.531646][ T8406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 739.559214][ T8406] EXT4-fs: dax option not supported [ 739.638722][ T8413] loop1: detected capacity change from 0 to 256 [ 739.984711][ T8420] EXT4-fs: Ignoring removed bh option [ 739.990281][ T8420] EXT4-fs: Ignoring removed mblk_io_submit option [ 740.362324][ T8420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.885495][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.973489][ T8428] __nla_validate_parse: 5 callbacks suppressed [ 740.973506][ T8428] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11183'. [ 740.994316][ T8426] set_capacity_and_notify: 1 callbacks suppressed [ 740.994338][ T8426] loop5: detected capacity change from 0 to 4096 [ 741.008124][ T8428] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11183'. [ 741.018945][ T8426] EXT4-fs: Ignoring removed bh option [ 741.024513][ T8426] EXT4-fs: Ignoring removed mblk_io_submit option [ 741.039531][ T8426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.181007][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.233005][ T8437] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11188'. [ 741.270869][ T8443] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 741.307053][ T8437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.336976][ T8437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.366349][ T8437] bond0 (unregistering): Released all slaves [ 741.521079][ T8453] loop5: detected capacity change from 0 to 512 [ 741.575363][ T8451] lo speed is unknown, defaulting to 1000 [ 741.690526][ T8457] loop4: detected capacity change from 0 to 764 [ 741.755392][ T8457] rock: directory entry would overflow storage [ 741.761708][ T8457] rock: sig=0x4f50, size=4, remaining=3 [ 741.767541][ T8457] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 741.780452][ T8467] loop2: detected capacity change from 0 to 256 [ 742.104276][ T8502] loop2: detected capacity change from 0 to 512 [ 742.115123][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11202'. [ 742.141578][ T8502] EXT4-fs: Ignoring removed nobh option [ 742.204024][ T8502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.246873][ T8455] dvmrp1: entered allmulticast mode [ 742.263702][ T8502] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 742.283668][ T8451] dvmrp1: left allmulticast mode [ 742.326329][ T8526] loop5: detected capacity change from 0 to 764 [ 742.376178][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.385885][ T8526] rock: directory entry would overflow storage [ 742.393146][ T8526] rock: sig=0x4f50, size=4, remaining=3 [ 742.399015][ T8526] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 742.448958][ T8533] netlink: 'syz.2.11209': attribute type 1 has an invalid length. [ 742.477513][ T8533] bond1: entered promiscuous mode [ 742.483195][ T8533] bond1: entered allmulticast mode [ 742.489065][ T8533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 742.523390][ T8533] erspan1: entered allmulticast mode [ 742.538818][ T8533] bond1: (slave erspan1): making interface the new active one [ 742.546388][ T8533] erspan1: entered promiscuous mode [ 742.556495][ T8533] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 742.600464][ T8541] loop1: detected capacity change from 0 to 256 [ 742.826112][ T8545] loop4: detected capacity change from 0 to 512 [ 742.838070][ T8545] EXT4-fs: Ignoring removed nobh option [ 742.906109][ T8545] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 742.973632][ T8554] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 742.973632][ T8554] program syz.2.11214 not setting count and/or reply_len properly [ 742.993256][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11214'. [ 743.117180][ T8545] EXT4-fs (loop4): 1 truncate cleaned up [ 743.140114][ T8545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.174504][ T8545] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.11211'. [ 743.185655][ T8545] netlink: zone id is out of range [ 743.192256][ T8545] netlink: zone id is out of range [ 743.199841][ T8545] netlink: zone id is out of range [ 743.206412][ T8545] netlink: zone id is out of range [ 743.213176][ T8545] netlink: zone id is out of range [ 743.218773][ T8545] netlink: zone id is out of range [ 743.224130][ T8545] netlink: zone id is out of range [ 743.230996][ T8545] netlink: zone id is out of range [ 743.241610][ T8545] netlink: zone id is out of range [ 743.249653][ T8545] netlink: zone id is out of range [ 743.307898][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.858088][ T8596] loop5: detected capacity change from 0 to 4096 [ 743.881249][ T8596] EXT4-fs: Ignoring removed bh option [ 743.887655][ T8596] EXT4-fs: Ignoring removed mblk_io_submit option [ 743.900891][ T8595] lo speed is unknown, defaulting to 1000 [ 743.914314][ T8601] loop2: detected capacity change from 0 to 764 [ 743.939020][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11224'. [ 743.961673][ T8601] rock: directory entry would overflow storage [ 743.969064][ T8601] rock: sig=0x4f50, size=4, remaining=3 [ 743.976466][ T8601] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 743.986160][ T8596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.017765][ T8607] FAT-fs (loop4): Directory bread(block 64) failed [ 744.025614][ T8607] FAT-fs (loop4): Directory bread(block 65) failed [ 744.034907][ T8607] FAT-fs (loop4): Directory bread(block 66) failed [ 744.041552][ T8607] FAT-fs (loop4): Directory bread(block 67) failed [ 744.051174][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.064616][ T8607] FAT-fs (loop4): Directory bread(block 68) failed [ 744.071685][ T8607] FAT-fs (loop4): Directory bread(block 69) failed [ 744.079883][ T8607] FAT-fs (loop4): Directory bread(block 70) failed [ 744.088272][ T8607] FAT-fs (loop4): Directory bread(block 71) failed [ 744.121940][ T8607] FAT-fs (loop4): Directory bread(block 72) failed [ 744.128954][ T8607] FAT-fs (loop4): Directory bread(block 73) failed [ 744.279704][T31828] IPVS: starting estimator thread 0... [ 744.373887][ T8624] IPVS: using max 2208 ests per chain, 110400 per kthread [ 744.498988][ T8635] EXT4-fs: Ignoring removed nobh option [ 744.520293][ T8635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 744.557965][ T8645] netlink: 260 bytes leftover after parsing attributes in process `syz.5.11236'. [ 744.571297][ T8635] EXT4-fs (loop1): 1 truncate cleaned up [ 744.597542][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11237'. [ 744.612577][ T8635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.646112][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11237'. [ 744.748573][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.837674][ T8658] EXT4-fs: test_dummy_encryption option not supported [ 744.878356][ T8661] EXT4-fs: Ignoring removed nobh option [ 744.897175][ T8661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.910196][ T8661] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 744.972547][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.082643][ T8680] EXT4-fs: Ignoring removed bh option [ 745.088553][ T8680] EXT4-fs: Ignoring removed mblk_io_submit option [ 745.155561][ T8680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.522170][ T29] audit: type=1400 audit(2000000069.527:35794): avc: denied { mounton } for pid=8715 comm="syz.2.11261" path="/77/file2/bus" dev="loop2" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 745.558800][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.328729][ T6708] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 746.336941][ T6708] FAT-fs (loop2): Filesystem has been set read-only [ 746.470897][ T8761] __nla_validate_parse: 4 callbacks suppressed [ 746.470918][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11278'. [ 746.623538][ T8779] set_capacity_and_notify: 9 callbacks suppressed [ 746.623561][ T8779] loop1: detected capacity change from 0 to 512 [ 746.663806][ T8782] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 746.675487][ T8779] EXT4-fs: Ignoring removed nobh option [ 746.706398][ T8779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.735688][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11287'. [ 746.748119][ T8782] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 746.774253][ T8779] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 746.860029][ T8782] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 746.877308][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.891180][ T8793] loop5: detected capacity change from 0 to 512 [ 746.926961][ T8793] EXT4-fs: Ignoring removed nobh option [ 746.958030][ T8793] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11288: invalid indirect mapped block 11 (level 0) [ 746.975612][ T8782] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 746.994306][ T8793] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.11288: attempt to clear invalid blocks 1024 len 1 [ 747.021493][ T8793] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 747.042340][ T8793] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11288: invalid indirect mapped block 1819239214 (level 0) [ 747.059306][ T8793] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11288: invalid indirect mapped block 33554432 (level 2) [ 747.076204][ T8793] EXT4-fs (loop5): 1 truncate cleaned up [ 747.082877][ T8793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.109927][ T3672] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.145631][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.146587][ T3672] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.173022][ T3672] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.182329][ T3672] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 747.264089][ T8804] loop4: detected capacity change from 0 to 764 [ 747.302254][ T8804] rock: directory entry would overflow storage [ 747.308759][ T8804] rock: sig=0x4f50, size=4, remaining=3 [ 747.314556][ T8804] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 747.348394][T13216] IPVS: starting estimator thread 0... [ 747.477817][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11295'. [ 747.483159][ T8810] IPVS: using max 2112 ests per chain, 105600 per kthread [ 747.560006][ T8824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40808 sclass=netlink_route_socket pid=8824 comm=syz.1.11299 [ 747.579671][ T29] audit: type=1326 audit(2000000071.566:35795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.603888][ T29] audit: type=1326 audit(2000000071.566:35796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.628511][ T29] audit: type=1326 audit(2000000071.586:35797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.654575][ T29] audit: type=1326 audit(2000000071.586:35798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.679218][ T29] audit: type=1326 audit(2000000071.586:35799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.704068][ T29] audit: type=1326 audit(2000000071.586:35800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.727907][ T29] audit: type=1326 audit(2000000071.586:35801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.752749][ T29] audit: type=1326 audit(2000000071.586:35802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 747.777377][ T29] audit: type=1326 audit(2000000071.586:35803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.4.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cbaaeb9 code=0x7ffc0000 [ 748.015023][ T8829] loop1: detected capacity change from 0 to 1024 [ 748.129308][ T8837] loop4: detected capacity change from 0 to 764 [ 748.173516][ T8837] rock: directory entry would overflow storage [ 748.181428][ T8837] rock: sig=0x4f50, size=4, remaining=3 [ 748.187873][ T8837] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 748.266643][ T8846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11309'. [ 748.440956][ T8858] loop1: detected capacity change from 0 to 1024 [ 748.475195][ T8858] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 748.565928][ T8864] netlink: 'syz.1.11313': attribute type 1 has an invalid length. [ 748.586532][ T8866] FAULT_INJECTION: forcing a failure. [ 748.586532][ T8866] name failslab, interval 1, probability 0, space 0, times 0 [ 748.599442][ T8866] CPU: 1 UID: 0 PID: 8866 Comm: syz.2.11317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 748.599486][ T8866] Tainted: [W]=WARN [ 748.599496][ T8866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.599513][ T8866] Call Trace: [ 748.599522][ T8866] [ 748.599532][ T8866] __dump_stack+0x1d/0x30 [ 748.599564][ T8866] dump_stack_lvl+0x95/0xd0 [ 748.599616][ T8866] dump_stack+0x15/0x1b [ 748.599694][ T8866] should_fail_ex+0x263/0x280 [ 748.599848][ T8866] should_failslab+0x8c/0xb0 [ 748.599882][ T8866] __kmalloc_cache_noprof+0x64/0x4a0 [ 748.600022][ T8866] ? inherit_task_group+0x142/0x680 [ 748.600061][ T8866] ? __rcu_read_unlock+0x4e/0x70 [ 748.600106][ T8866] inherit_task_group+0x142/0x680 [ 748.600194][ T8866] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 748.600335][ T8866] perf_event_init_task+0x23d/0x3c0 [ 748.600370][ T8866] copy_process+0xb23/0x1f10 [ 748.600430][ T8866] kernel_clone+0x16b/0x5b0 [ 748.600492][ T8866] ? vfs_write+0x86e/0x9f0 [ 748.600551][ T8866] __x64_sys_clone+0x143/0x180 [ 748.600588][ T8866] x64_sys_call+0x12d0/0x3000 [ 748.600624][ T8866] do_syscall_64+0xc0/0x2a0 [ 748.600667][ T8866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.600705][ T8866] RIP: 0033:0x7f4d5416aeb9 [ 748.600739][ T8866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.600763][ T8866] RSP: 002b:00007f4d52bc6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 748.600790][ T8866] RAX: ffffffffffffffda RBX: 00007f4d543e5fa0 RCX: 00007f4d5416aeb9 [ 748.600809][ T8866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 748.600898][ T8866] RBP: 00007f4d52bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 748.600916][ T8866] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 748.600956][ T8866] R13: 00007f4d543e6038 R14: 00007f4d543e5fa0 R15: 00007fffd61becb8 [ 748.600985][ T8866] [ 748.829385][ T8854] loop5: detected capacity change from 0 to 512 [ 748.844160][ T8868] loop1: detected capacity change from 0 to 512 [ 748.852303][ T8868] EXT4-fs: test_dummy_encryption option not supported [ 748.894576][ T8854] EXT4-fs: Ignoring removed nobh option [ 748.945396][ T8854] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 748.989003][ T8854] EXT4-fs (loop5): 1 truncate cleaned up [ 749.028716][ T8854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.064561][ T8854] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.11311'. [ 749.076783][ T8854] net_ratelimit: 3362 callbacks suppressed [ 749.076906][ T8854] netlink: zone id is out of range [ 749.091134][ T8854] netlink: zone id is out of range [ 749.099011][ T8854] netlink: zone id is out of range [ 749.104881][ T8854] netlink: zone id is out of range [ 749.110845][ T8854] netlink: zone id is out of range [ 749.117196][ T8854] netlink: zone id is out of range [ 749.122891][ T8854] netlink: zone id is out of range [ 749.129062][ T8854] netlink: zone id is out of range [ 749.146501][ T8854] netlink: zone id is out of range [ 749.152436][ T8854] netlink: zone id is out of range [ 749.191987][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.345194][ T8895] loop4: detected capacity change from 0 to 128 [ 749.363275][ T8893] loop5: detected capacity change from 0 to 4096 [ 749.385740][ T8893] EXT4-fs: Ignoring removed bh option [ 749.391378][ T8893] EXT4-fs: Ignoring removed mblk_io_submit option [ 749.480413][ T8893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.635044][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.660234][ T8908] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.11332: corrupted inode contents [ 749.698521][ T8908] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #3: comm syz.2.11332: mark_inode_dirty error [ 749.713857][ T8908] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #3: comm syz.2.11332: corrupted inode contents [ 749.726436][ T8908] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.11332: mark_inode_dirty error [ 749.739263][ T8908] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.11332: Failed to acquire dquot type 0 [ 749.756016][ T8908] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.11332: corrupted inode contents [ 749.768472][ T8908] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #16: comm syz.2.11332: mark_inode_dirty error [ 749.792982][ T8908] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.11332: corrupted inode contents [ 749.867443][ T8908] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.11332: mark_inode_dirty error [ 749.879428][ T8908] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.11332: corrupted inode contents [ 749.892414][ T8908] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 749.905615][ T8908] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.11332: corrupted inode contents [ 749.919748][ T8908] EXT4-fs error (device loop2): ext4_truncate:4635: inode #16: comm syz.2.11332: mark_inode_dirty error [ 749.932130][ T8908] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 749.943528][ T8908] EXT4-fs (loop2): 1 truncate cleaned up [ 749.954485][ T8908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.977243][ T8908] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.179860][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11340'. [ 750.194176][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11340'. [ 750.225186][ T8932] EXT4-fs (loop5): orphan cleanup on readonly fs [ 750.233461][ T8932] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 750.259255][ T8932] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 750.275884][ T8932] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.11341: attempt to clear invalid blocks 2 len 1 [ 750.290862][ T8932] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11341: invalid indirect mapped block 1819239214 (level 0) [ 750.330091][ T8932] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.11341: invalid indirect mapped block 1819239214 (level 1) [ 750.347289][ T8932] EXT4-fs (loop5): 1 truncate cleaned up [ 750.353528][ T8932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 750.383989][ T8937] EXT4-fs: Ignoring removed bh option [ 750.390436][ T8937] EXT4-fs: Ignoring removed mblk_io_submit option [ 750.403836][ T8937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.464708][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.483784][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.521256][ T8945] ref_ctr_offset mismatch. inode: 0x1fe offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa400fa0006 [ 750.540511][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.705441][ T8971] EXT4-fs: Ignoring removed nobh option [ 750.714155][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 750.714197][ T29] audit: type=1326 audit(2000000074.714:35807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.745586][ T29] audit: type=1326 audit(2000000074.714:35808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.770666][ T29] audit: type=1326 audit(2000000074.714:35809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.795338][ T29] audit: type=1326 audit(2000000074.714:35810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.819856][ T29] audit: type=1326 audit(2000000074.714:35811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.844315][ T29] audit: type=1326 audit(2000000074.714:35812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.868924][ T29] audit: type=1326 audit(2000000074.714:35813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.893281][ T29] audit: type=1326 audit(2000000074.714:35814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.917854][ T29] audit: type=1326 audit(2000000074.714:35815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 750.942808][ T29] audit: type=1326 audit(2000000074.714:35816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8968 comm="syz.2.11354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 751.008825][ T8971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.028079][ T8981] netlink: 'syz.9.11359': attribute type 6 has an invalid length. [ 751.042692][ T8971] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 751.069146][ T8978] rock: directory entry would overflow storage [ 751.075934][ T8978] rock: sig=0x4f50, size=4, remaining=3 [ 751.082274][ T8978] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 751.128121][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.282293][ T8973] Restarting kernel threads ... [ 751.288742][ T8973] Done restarting kernel threads. [ 751.502668][ T9016] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 12 [ 751.635973][ T8991] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 751.643188][ T8991] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 751.653961][ T8991] vhci_hcd vhci_hcd.0: Device attached [ 751.679174][ T9037] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 751.686202][ T9037] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 751.694404][ T9037] vhci_hcd vhci_hcd.0: Device attached [ 751.748761][ T9035] netlink: 'syz.2.11380': attribute type 83 has an invalid length. [ 751.774219][ T9030] vhci_hcd: connection closed [ 751.774476][ T3681] vhci_hcd vhci_hcd.4: stop threads [ 751.784870][ T3681] vhci_hcd vhci_hcd.4: release socket [ 751.790560][ T3681] vhci_hcd vhci_hcd.4: disconnect device [ 751.802026][ T9039] vhci_hcd: connection closed [ 751.803097][ T3681] vhci_hcd vhci_hcd.1: stop threads [ 751.813516][ T3681] vhci_hcd vhci_hcd.1: release socket [ 751.819332][ T3681] vhci_hcd vhci_hcd.1: disconnect device [ 751.853788][ T9050] netlink: 'syz.2.11383': attribute type 6 has an invalid length. [ 751.868085][T31823] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 751.884707][ T9052] batadv_slave_1: entered promiscuous mode [ 751.892012][ T9051] batadv_slave_1: left promiscuous mode [ 752.074259][ T9062] set_capacity_and_notify: 7 callbacks suppressed [ 752.074281][ T9062] loop2: detected capacity change from 0 to 512 [ 752.093648][ T9062] EXT4-fs: Ignoring removed nobh option [ 752.112926][ T9062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.128024][ T9062] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 752.159409][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.212666][ T9077] loop5: detected capacity change from 0 to 512 [ 752.221299][ T9077] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 752.240438][ T9077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102] [ 752.263481][ T9077] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.11393: corrupted in-inode xattr: e_value size too large [ 752.281617][ T9077] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.11393: couldn't read orphan inode 15 (err -117) [ 752.300076][ T9077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.437951][ T9089] can0: slcan on ttyS3. [ 752.449226][ T9087] loop4: detected capacity change from 0 to 512 [ 752.467453][ T9087] EXT4-fs: test_dummy_encryption option not supported [ 752.477612][ T9089] can0 (unregistered): slcan off ttyS3. [ 752.498215][ T9089] Falling back ldisc for ttyS3. [ 752.504939][ T9081] SELinux: ebitmap: truncated map [ 752.533887][ T9081] SELinux: failed to load policy [ 752.643163][ T9103] loop4: detected capacity change from 0 to 512 [ 752.652139][ T9103] EXT4-fs: Ignoring removed nobh option [ 752.681231][ T9103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.739308][ T9103] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 752.750873][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.788291][ T9112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11406'. [ 752.889535][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11407'. [ 752.903022][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.230075][ T9159] loop5: detected capacity change from 0 to 512 [ 753.244042][ T9159] EXT4-fs: test_dummy_encryption option not supported [ 753.405764][ T9167] loop5: detected capacity change from 0 to 512 [ 753.426401][ T9167] EXT4-fs (loop5): Invalid log block size: 4294967295 [ 753.501003][ T9171] xt_hashlimit: max too large, truncated to 1048576 [ 753.532245][ T9175] netlink: 'syz.9.11429': attribute type 10 has an invalid length. [ 753.543862][ T9176] loop5: detected capacity change from 0 to 512 [ 753.557660][ T9176] EXT4-fs (loop5): 1 truncate cleaned up [ 753.590908][ T9176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.762473][ T9191] loop2: detected capacity change from 0 to 512 [ 753.785470][ T9191] EXT4-fs: test_dummy_encryption option not supported [ 753.856315][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.955847][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11436'. [ 753.976323][ T9189] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11433'. [ 754.023311][ T9189] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 754.135021][ T9215] netlink: 'syz.2.11441': attribute type 83 has an invalid length. [ 754.259460][ T9225] loop5: detected capacity change from 0 to 512 [ 754.297989][ T9225] EXT4-fs: test_dummy_encryption option not supported [ 754.370669][ T9232] loop2: detected capacity change from 0 to 512 [ 754.387075][ T9232] EXT4-fs: Ignoring removed nobh option [ 754.462570][ T9232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.512857][ T9232] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 754.532947][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11453'. [ 754.614909][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.627635][ T9251] Cannot find add_set index 0 as target [ 754.776344][ T9276] netlink: 'syz.2.11458': attribute type 83 has an invalid length. [ 754.847764][ T9247] lo speed is unknown, defaulting to 1000 [ 754.978462][ T9284] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 755.019628][ T9284] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 755.029511][ T9284] EXT4-fs (loop4): orphan cleanup on readonly fs [ 755.093422][ T9284] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.11466: Failed to acquire dquot type 0 [ 755.125246][ T9284] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.11466: Failed to acquire dquot type 0 [ 755.137559][ T9284] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.11466: Freeing blocks not in datazone - block = 0, count = 4096 [ 755.176680][ T9284] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.11466: Failed to acquire dquot type 0 [ 755.189973][ T9284] EXT4-fs (loop4): 1 orphan inode deleted [ 755.198588][ T9284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 755.440663][ T37] team0: Port device bond0 removed [ 755.453306][ T37] bond0 (unregistering): Released all slaves [ 755.487416][ T37] bond1 (unregistering): Released all slaves [ 755.525278][ T37] bond2 (unregistering): Released all slaves [ 755.554665][ T37] bond3 (unregistering): (slave macvlan1): Releasing backup interface [ 755.593536][ T37] bond3 (unregistering): Released all slaves [ 755.748116][ T9247] chnl_net:caif_netlink_parms(): no params data found [ 755.809642][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.827381][ T37] hsr_slave_0: left promiscuous mode [ 755.837989][ T37] hsr_slave_1: left promiscuous mode [ 755.994003][T16537] smc: removing ib device !yz! [ 756.075281][ T9333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.091576][ T9333] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 756.106454][ T9333] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11474'. [ 756.160457][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.167579][ T9247] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.175804][ T9247] bridge_slave_0: entered allmulticast mode [ 756.183284][ T9247] bridge_slave_0: entered promiscuous mode [ 756.195445][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.202783][ T9247] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.210487][ T9247] bridge_slave_1: entered allmulticast mode [ 756.227594][ T9247] bridge_slave_1: entered promiscuous mode [ 756.394756][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 756.394775][ T29] audit: type=1326 audit(2000000080.402:35957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.425518][ T29] audit: type=1326 audit(2000000080.402:35958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.475323][ T29] audit: type=1326 audit(2000000080.462:35959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.499443][ T29] audit: type=1326 audit(2000000080.462:35960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.523503][ T29] audit: type=1326 audit(2000000080.462:35961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.547823][ T29] audit: type=1326 audit(2000000080.462:35962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.572431][ T29] audit: type=1326 audit(2000000080.462:35963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.596483][ T29] audit: type=1326 audit(2000000080.462:35964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.621360][ T29] audit: type=1326 audit(2000000080.462:35965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.645946][ T29] audit: type=1326 audit(2000000080.462:35966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9350 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x7ffc0000 [ 756.686743][ T9247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.713690][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11478'. [ 756.723820][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.732982][ T9353] netlink: 'syz.1.11477': attribute type 83 has an invalid length. [ 756.755276][ T9247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.801809][ T9366] EXT4-fs: Ignoring removed nobh option [ 756.840306][ T9368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.855004][ T9247] team0: Port device team_slave_0 added [ 756.857998][ T9368] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.860917][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 756.886045][ T9368] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.11478: corrupted xattr block 33: invalid checksum [ 756.888615][ T9366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.919194][ T9247] team0: Port device team_slave_1 added [ 756.931014][ T9368] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 756.952594][ T9366] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 756.956047][ T9368] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.11478: corrupted xattr block 33: invalid checksum [ 756.989166][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.996192][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.023069][ T9247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.040627][ T9247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.048222][ T9247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.075286][ T9247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.088238][ T9368] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 757.102009][ T37] IPVS: stop unused estimator thread 0... [ 757.113041][ T9368] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.11478: corrupted xattr block 33: invalid checksum [ 757.128010][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.139167][ T9368] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 757.189822][ T9247] hsr_slave_0: entered promiscuous mode [ 757.196285][ T9247] hsr_slave_1: entered promiscuous mode [ 757.219369][ T9247] debugfs: 'hsr0' already exists in 'hsr' [ 757.225448][ T9247] Cannot create hsr debugfs directory [ 757.308365][ T37] bridge_slave_1: left allmulticast mode [ 757.314567][ T37] bridge_slave_1: left promiscuous mode [ 757.321227][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.366973][ T9396] set_capacity_and_notify: 6 callbacks suppressed [ 757.366994][ T9396] loop4: detected capacity change from 0 to 2048 [ 757.390068][ T37] bridge_slave_0: left allmulticast mode [ 757.396073][ T37] bridge_slave_0: left promiscuous mode [ 757.401997][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.451351][ T4204] loop4: p1 < > p4 [ 757.456568][ T4204] loop4: p4 size 8388608 extends beyond EOD, truncated [ 757.471633][ T9396] loop4: p1 < > p4 [ 757.493464][ T9396] loop4: p4 size 8388608 extends beyond EOD, truncated [ 757.559477][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.585049][ T4204] udevd[4204]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 757.597440][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 757.610854][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.632436][ T4204] udevd[4204]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 757.644143][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 757.655228][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 757.684291][ T37] bond0 (unregistering): Released all slaves [ 757.693422][ T9415] IPv6: NLM_F_REPLACE set, but no existing node found! [ 757.705221][ T4204] udevd[4204]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 757.716859][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 757.804334][ T37] hsr_slave_0: left promiscuous mode [ 757.821770][ T37] hsr_slave_1: left promiscuous mode [ 757.827585][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.846375][ T9420] loop1: detected capacity change from 0 to 512 [ 757.853563][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.866005][ T9420] EXT4-fs (loop1): failed to initialize system zone (-117) [ 757.891495][ T9420] EXT4-fs (loop1): mount failed [ 757.910353][ T9423] loop4: detected capacity change from 0 to 128 [ 757.916447][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.947580][ T9423] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.971197][ T9423] ext4 filesystem being mounted at /244/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 758.049208][ T9435] netlink: 'syz.1.11496': attribute type 2 has an invalid length. [ 758.057909][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11496'. [ 758.076807][ T4196] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 758.086351][ T37] team0 (unregistering): Port device team_slave_1 removed [ 758.113992][ T37] team0 (unregistering): Port device team_slave_0 removed [ 758.165673][ T9440] loop4: detected capacity change from 0 to 512 [ 758.233048][ T9440] EXT4-fs: Ignoring removed nobh option [ 758.245374][ T9440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 758.281430][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11500'. [ 758.292509][ T9440] EXT4-fs (loop4): 1 truncate cleaned up [ 758.319343][ T9440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.417290][ T9465] loop2: detected capacity change from 0 to 764 [ 758.442906][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.455669][ T9465] rock: directory entry would overflow storage [ 758.462463][ T9465] rock: sig=0x4f50, size=4, remaining=3 [ 758.468181][ T9465] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 758.557346][ T9473] lo speed is unknown, defaulting to 1000 [ 758.642586][ T9487] FAULT_INJECTION: forcing a failure. [ 758.642586][ T9487] name failslab, interval 1, probability 0, space 0, times 0 [ 758.656159][ T9487] CPU: 0 UID: 0 PID: 9487 Comm: syz.5.11504 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 758.656204][ T9487] Tainted: [W]=WARN [ 758.656214][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.656232][ T9487] Call Trace: [ 758.656290][ T9487] [ 758.656298][ T9487] __dump_stack+0x1d/0x30 [ 758.656325][ T9487] dump_stack_lvl+0x95/0xd0 [ 758.656354][ T9487] dump_stack+0x15/0x1b [ 758.656436][ T9487] should_fail_ex+0x263/0x280 [ 758.656471][ T9487] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 758.656505][ T9487] should_failslab+0x8c/0xb0 [ 758.656529][ T9487] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 758.656658][ T9487] ? shmem_alloc_inode+0x34/0x50 [ 758.656689][ T9487] ? kstrtouint_from_user+0xa8/0xf0 [ 758.656725][ T9487] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 758.656818][ T9487] shmem_alloc_inode+0x34/0x50 [ 758.656925][ T9487] alloc_inode+0x40/0x170 [ 758.657028][ T9487] new_inode+0x1d/0xe0 [ 758.657057][ T9487] shmem_get_inode+0x246/0x750 [ 758.657096][ T9487] __shmem_file_setup+0x112/0x210 [ 758.657134][ T9487] shmem_file_setup+0x3b/0x50 [ 758.657169][ T9487] __se_sys_memfd_create+0x2f6/0x6c0 [ 758.657221][ T9487] __x64_sys_memfd_create+0x31/0x40 [ 758.657257][ T9487] x64_sys_call+0x28cb/0x3000 [ 758.657291][ T9487] do_syscall_64+0xc0/0x2a0 [ 758.657360][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.657390][ T9487] RIP: 0033:0x7f207e95aeb9 [ 758.657411][ T9487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.657437][ T9487] RSP: 002b:00007f207d395d58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 758.657460][ T9487] RAX: ffffffffffffffda RBX: 00000000000005cb RCX: 00007f207e95aeb9 [ 758.657579][ T9487] RDX: 00007f207d395ddc RSI: 0000000000000000 RDI: 00007f207e9c7333 [ 758.657632][ T9487] RBP: 0000200000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 758.657649][ T9487] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 758.657706][ T9487] R13: 00007f207d395ddc R14: 00007f207d395de0 R15: 00007ffe104e48b8 [ 758.657727][ T9487] [ 758.957785][ T9247] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 759.016536][ T9247] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 759.050689][ T9247] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 759.062336][ T9473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11502'. [ 759.071906][ T9473] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11502'. [ 759.082001][ T9473] netlink: 'syz.4.11502': attribute type 6 has an invalid length. [ 759.090294][ T9473] netlink: 'syz.4.11502': attribute type 5 has an invalid length. [ 759.098145][ T9473] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11502'. [ 759.113660][ T9247] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 759.281044][ T9517] netlink: 'syz.4.11509': attribute type 10 has an invalid length. [ 759.413593][ T9524] loop5: detected capacity change from 0 to 512 [ 759.425982][ T9524] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 759.462116][ T9517] team0: Port device bridge0 added [ 759.483605][ T9524] EXT4-fs (loop5): orphan cleanup on readonly fs [ 759.523838][ T9524] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.11511: Block bitmap for bg 0 marked uninitialized [ 759.561155][ T9524] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 759.579169][ T9524] EXT4-fs (loop5): 1 orphan inode deleted [ 759.605430][ T9524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 759.667501][ T9247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.691962][ T9247] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.717509][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.724860][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.769307][ T9524] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 759.795322][ T9524] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 759.811261][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.818519][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.975138][ T9543] loop4: detected capacity change from 0 to 256 [ 760.014249][ T9247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 760.025004][ T9247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 760.193993][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11511'. [ 760.315690][ T9543] FAT-fs (loop4): IO charset euc-jp not found [ 760.472271][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.748484][ T9247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.134128][ T9570] loop4: detected capacity change from 0 to 512 [ 761.227628][ T9570] EXT4-fs (loop4): orphan cleanup on readonly fs [ 761.286466][ T9570] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #11: block 1: comm syz.4.11517: lblock 0 mapped to illegal pblock 1 (length 1) [ 761.348514][ T9570] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 761.379126][ T9570] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.11517: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 761.425455][ T9570] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.11517: ea_inode dec ref err=-117 [ 761.454495][ T9570] EXT4-fs (loop4): 1 orphan inode deleted [ 761.467361][ T9570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 761.556813][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.581592][ T9247] veth0_vlan: entered promiscuous mode [ 761.609046][ T9247] veth1_vlan: entered promiscuous mode [ 761.680892][ T9247] veth0_macvtap: entered promiscuous mode [ 761.692617][ T9611] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11522'. [ 761.713430][ T9247] veth1_macvtap: entered promiscuous mode [ 761.733650][ T9247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.752796][ T9247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.782185][ T3681] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.829889][ T3681] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.077512][ T3681] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.108702][ T3681] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.204037][ T9637] bridge1: entered promiscuous mode [ 762.209348][ T9637] bridge1: entered allmulticast mode [ 762.219076][ T9637] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11526'. [ 762.229904][ T9637] tmpfs: Bad value for 'mpol' [ 762.667708][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11527'. [ 763.544112][ T9647] loop1: detected capacity change from 0 to 512 [ 763.577095][ T9647] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 763.610147][ T9647] EXT4-fs (loop1): 1 truncate cleaned up [ 763.643088][ T9647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.272494][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.292454][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.460293][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.641113][ T9657] loop5: detected capacity change from 0 to 512 [ 764.701327][ T9657] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 3: comm syz.5.11532: lblock 0 mapped to illegal pblock 3 (length 1) [ 764.915554][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.961022][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.310243][ T9657] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.11532: error -117 reading directory block [ 765.329378][ T9657] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 765.339037][ T9657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.359504][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.370332][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.833870][ T9649] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 766.345155][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.487966][ T9712] loop4: detected capacity change from 0 to 512 [ 767.079644][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88814ddb8800: rx timeout, send abort [ 767.088672][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88814ddb8800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 767.548438][ T9731] net_ratelimit: 11 callbacks suppressed [ 767.554269][ T9731] Set syz1 is full, maxelem 65536 reached [ 767.654830][ T9737] loop9: detected capacity change from 0 to 2048 [ 767.744473][ T9742] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11564'. [ 767.753977][ T9742] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11564'. [ 767.846316][ T9737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.867058][ T9737] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.892982][ T9757] loop1: detected capacity change from 0 to 2048 [ 767.920046][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.923711][ T9757] EXT4-fs: Ignoring removed mblk_io_submit option [ 767.958727][ T9757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.003286][ T9764] netlink: 156 bytes leftover after parsing attributes in process `syz.9.11571'. [ 768.036429][ T9757] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11569: bg 0: block 234: padding at end of block bitmap is not set [ 768.051231][ T9757] EXT4-fs (loop1): Remounting filesystem read-only [ 768.060934][ T9764] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11571'. [ 768.104663][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.114646][ T9770] loop5: detected capacity change from 0 to 1024 [ 768.114771][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.128411][ T9770] EXT4-fs: inline encryption not supported [ 768.145998][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.158408][ T9770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.268397][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.685553][ T9787] loop9: detected capacity change from 0 to 512 [ 768.693201][ T9787] EXT4-fs: Ignoring removed mblk_io_submit option [ 768.705676][ T9787] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 768.714015][ T9787] EXT4-fs (loop9): orphan cleanup on readonly fs [ 768.720597][ T9787] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 768.729853][ T9789] loop2: detected capacity change from 0 to 512 [ 768.736780][ T9787] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.11578: attempt to clear invalid blocks 2 len 1 [ 768.750839][ T9789] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 768.766859][ T9787] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11578: bg 0: block 456: padding at end of block bitmap is not set [ 768.784210][ T9787] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 768.801983][ T9787] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.11578: invalid indirect mapped block 1819239214 (level 0) [ 768.818122][ T9787] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.11578: invalid indirect mapped block 1819239214 (level 1) [ 768.843883][ T9787] EXT4-fs (loop9): 1 truncate cleaned up [ 768.863483][ T9787] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 768.882613][ T9787] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 768.903080][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.009433][ T9804] loop9: detected capacity change from 0 to 512 [ 769.142929][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11584'. [ 769.152264][ T9808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11584'. [ 769.274961][ T9804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.383604][ T9804] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.520522][ T9818] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 769.528161][T13216] IPVS: starting estimator thread 0... [ 769.616612][ T9821] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 769.680223][ T9819] IPVS: using max 2208 ests per chain, 110400 per kthread [ 769.801384][ T9824] loop2: detected capacity change from 0 to 512 [ 769.808414][ T9824] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 769.822863][ T9826] loop4: detected capacity change from 0 to 512 [ 769.833719][ T9824] EXT4-fs (loop2): invalid journal inode [ 769.844904][ T9824] EXT4-fs (loop2): can't get journal size [ 769.985562][ T9826] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.11588: corrupted in-inode xattr: invalid ea_ino [ 770.000291][ T9824] EXT4-fs (loop2): 1 truncate cleaned up [ 770.020688][ T9824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.043527][ T9826] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.11588: couldn't read orphan inode 15 (err -117) [ 770.111315][ T9826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.368457][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.393578][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.403366][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.521140][ T9843] loop1: detected capacity change from 0 to 512 [ 770.651680][ T9845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11598'. [ 770.776211][ T9848] syz_tun: entered allmulticast mode [ 770.815047][ T9848] hugetlbfs: syz.1.11599 (9848): Using mlock ulimits for SHM_HUGETLB is obsolete [ 770.842126][ T9847] syz_tun: left allmulticast mode [ 771.154902][ T9881] loop4: detected capacity change from 0 to 256 [ 771.184567][ T9881] FAT-fs (loop4): IO charset iso8859-4 not found [ 771.277187][ T9896] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11613'. [ 771.410063][ T9901] team0: Port device bridge0 removed [ 771.416031][ T9901] bridge_slave_0: left allmulticast mode [ 771.422300][ T9901] bridge_slave_0: left promiscuous mode [ 771.428322][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.439868][ T9901] bridge_slave_1: left allmulticast mode [ 771.446074][ T9901] bridge_slave_1: left promiscuous mode [ 771.452238][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.464845][ T9901] team0: Port device team_slave_0 removed [ 771.472870][ T9901] team0: Port device team_slave_1 removed [ 771.479922][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.490582][ T9901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.504663][ T9901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 772.564963][ T9927] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11624'. [ 772.710236][ T9930] loop5: detected capacity change from 0 to 512 [ 773.048172][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11631'. [ 773.087856][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.220154][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.293099][ T9949] batman_adv: batadv0: Adding interface: dummy0 [ 773.299737][ T9949] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.326605][ T9949] batman_adv: batadv0: Interface activated: dummy0 [ 773.340890][ T9949] batadv0: mtu less than device minimum [ 773.347670][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.359311][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.370912][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.382489][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.393682][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.404963][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.416528][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.427863][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.439447][ T9949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 773.503379][ T9954] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11635'. [ 773.580715][ T9959] loop5: detected capacity change from 0 to 512 [ 773.702697][ T9967] loop5: detected capacity change from 0 to 512 [ 773.752945][ T9941] 9pnet_fd: p9_fd_create_tcp (9941): problem connecting socket to 127.0.0.1 [ 773.818050][ T9967] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 773.889910][ T9967] EXT4-fs (loop5): invalid journal inode [ 773.902098][ T9967] EXT4-fs (loop5): can't get journal size [ 773.940397][ T9967] EXT4-fs (loop5): 1 truncate cleaned up [ 774.010211][ T9967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.640719][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.651614][ T9992] netlink: 236 bytes leftover after parsing attributes in process `syz.9.11647'. [ 774.819332][ T9995] loop9: detected capacity change from 0 to 512 [ 774.854474][ T9997] loop1: detected capacity change from 0 to 1024 [ 774.929000][ T9997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 774.971777][T10004] loop5: detected capacity change from 0 to 128 [ 774.983689][T10005] loop9: detected capacity change from 0 to 512 [ 775.005655][T10005] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 775.099524][ T9997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.259928][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.273206][T10019] netlink: 236 bytes leftover after parsing attributes in process `syz.2.11659'. [ 775.290694][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.338452][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.365796][T10028] loop1: detected capacity change from 0 to 512 [ 775.390431][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.402779][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.052979][T10037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 776.060752][T10037] IPv6: NLM_F_CREATE should be set when creating new route [ 776.245565][T10048] loop4: detected capacity change from 0 to 128 [ 776.258872][T10048] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 776.302769][T10037] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.310703][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.813767][T10048] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 776.924498][T10037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.263275][ T37] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.291584][T10062] loop1: detected capacity change from 0 to 4096 [ 777.349386][T16536] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.363456][ T4196] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 777.393457][T16536] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.403310][T16536] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.419066][T10062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.464008][T10082] netlink: 108 bytes leftover after parsing attributes in process `syz.9.11682'. [ 777.531530][T10062] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.11675: corrupted inode contents [ 777.544901][T10062] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.11675: mark_inode_dirty error [ 777.557570][T10062] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.11675: corrupted inode contents [ 777.571959][T10062] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.11675: mark_inode_dirty error [ 777.584298][T10062] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.11675: corrupted inode contents [ 777.626562][T10062] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.11675: mark_inode_dirty error [ 777.653650][T10062] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.11675: corrupted inode contents [ 777.667904][T10062] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.11675: mark_inode_dirty error [ 777.683031][T10062] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 777.710988][T10096] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 777.721691][T10088] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.11675: corrupted inode contents [ 777.816382][ T2412] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 777.906095][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.334713][T10113] bridge2: entered promiscuous mode [ 778.340961][T10113] bridge2: entered allmulticast mode [ 778.400406][T10118] tmpfs: Bad value for 'mpol' [ 778.660632][T10126] vlan2: entered promiscuous mode [ 778.665845][T10126] bridge0: entered promiscuous mode [ 779.160831][T10135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 779.168291][T10135] IPv6: NLM_F_CREATE should be set when creating new route [ 779.184857][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11699'. [ 779.428730][T10142] loop4: detected capacity change from 0 to 512 [ 779.589428][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.665959][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.910069][T10153] loop1: detected capacity change from 0 to 1024 [ 779.941259][T10153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 779.955310][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.968806][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.987609][T10153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 780.019435][T10153] System zones: 0-1, 3-36 [ 780.029949][T10153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.059091][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.084068][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.099248][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.244826][T10162] loop2: detected capacity change from 0 to 512 [ 780.253003][T10163] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11708'. [ 780.291044][T10162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 780.306082][T10162] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.557269][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 780.571409][T10171] bridge_slave_0: entered promiscuous mode [ 780.577816][T10171] bridge_slave_0: entered allmulticast mode [ 781.272823][T10182] lo speed is unknown, defaulting to 1000 [ 781.413929][T10199] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11721'. [ 781.455159][T10202] loop5: detected capacity change from 0 to 1024 [ 781.463546][T10202] EXT4-fs: Ignoring removed orlov option [ 781.479312][T10202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.159197][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.270043][T10235] loop2: detected capacity change from 0 to 512 [ 783.450615][T10235] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 783.469987][T10235] EXT4-fs (loop2): invalid journal inode [ 783.553574][T10240] loop5: detected capacity change from 0 to 136 [ 783.579462][T10240] Attempt to read inode for relocated directory [ 783.668650][T10235] EXT4-fs (loop2): can't get journal size [ 783.685123][T10243] vlan3: entered promiscuous mode [ 783.690653][T10243] vlan3: entered allmulticast mode [ 783.695902][T10243] hsr_slave_1: entered allmulticast mode [ 783.716367][T10244] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11733'. [ 783.735176][T10235] EXT4-fs (loop2): 1 truncate cleaned up [ 783.746750][T10235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.781130][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11734'. [ 784.061731][T10253] netlink: 'syz.4.11736': attribute type 1 has an invalid length. [ 784.071066][T10253] netlink: 'syz.4.11736': attribute type 4 has an invalid length. [ 784.079285][T10253] netlink: 15586 bytes leftover after parsing attributes in process `syz.4.11736'. [ 784.253665][T10257] loop5: detected capacity change from 0 to 764 [ 784.301309][T10257] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 784.375690][T10257] Symlink component flag not implemented [ 784.398110][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11741'. [ 784.420715][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.433576][T10257] Symlink component flag not implemented (7) [ 784.578775][T10276] netlink: 236 bytes leftover after parsing attributes in process `syz.9.11745'. [ 786.238851][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.246504][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.267519][T10310] loop9: detected capacity change from 0 to 512 [ 786.310933][T10310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.367620][T10310] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 786.387820][T10295] batman_adv: batadv0: Interface deactivated: dummy0 [ 786.413964][T10310] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.11758: corrupted inode contents [ 786.459529][T10310] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.11758: mark_inode_dirty error [ 786.486093][T10310] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.11758: corrupted inode contents [ 786.511535][T10295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.521703][T10320] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.11758: corrupted inode contents [ 786.585637][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.595815][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.612499][T10295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.664597][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.749776][T10329] loop9: detected capacity change from 0 to 512 [ 786.786175][T10329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.806740][T10329] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.832644][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.019286][T10334] netlink: 236 bytes leftover after parsing attributes in process `syz.9.11765'. [ 787.099778][ T3459] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.110009][ T3459] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.146011][ T3459] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.197165][ T3459] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.229372][T10341] loop9: detected capacity change from 0 to 1764 [ 788.256558][T10355] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.11772'. [ 788.973301][T10363] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11777'. [ 789.130312][T10367] SELinux: failed to load policy [ 789.396268][T10381] loop4: detected capacity change from 0 to 512 [ 789.503932][T10381] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 789.646013][T10379] loop1: detected capacity change from 0 to 4096 [ 789.722432][T10381] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.11784: corrupted in-inode xattr: invalid ea_ino [ 789.745124][T10381] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.11784: couldn't read orphan inode 15 (err -117) [ 789.766729][T10379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.780019][T10381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.846579][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.895517][T10392] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11788'. [ 789.927348][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.933524][T10394] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.11786'. [ 789.993478][T10398] loop4: detected capacity change from 0 to 512 [ 790.029007][T10397] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11790'. [ 790.060711][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 790.060738][ T29] audit: type=1400 audit(2000000120.055:36018): avc: denied { write } for pid=10399 comm="syz.4.11791" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 790.194631][T10408] loop5: detected capacity change from 0 to 1764 [ 790.220689][T10407] loop9: detected capacity change from 0 to 512 [ 791.705588][T10420] loop1: detected capacity change from 0 to 512 [ 791.714678][T10420] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 791.723556][T10420] EXT4-fs (loop1): 1 truncate cleaned up [ 791.730097][T10420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.216240][T10436] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11804'. [ 792.420662][T10440] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11805'. [ 792.564528][T10442] loop9: detected capacity change from 0 to 512 [ 792.576210][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.632860][T10447] x_tables: duplicate underflow at hook 3 [ 792.652310][T10450] loop4: detected capacity change from 0 to 764 [ 792.673733][T10450] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 793.033038][T10465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.042090][T10465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.263950][T10471] loop4: detected capacity change from 0 to 512 [ 793.280303][T10472] loop1: detected capacity change from 0 to 256 [ 793.298335][T10474] loop5: detected capacity change from 0 to 512 [ 793.305623][T10471] EXT4-fs: Ignoring removed i_version option [ 793.312144][T10471] EXT4-fs: Ignoring removed bh option [ 793.402212][T10471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.454837][T10471] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 793.489672][T10471] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.11816: resize_inode disabled but reserved GDT blocks non-zero [ 793.556177][T10484] loop5: detected capacity change from 0 to 764 [ 793.574662][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.842631][T10484] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 793.875472][T13223] kernel write not supported for file /register (pid: 13223 comm: kworker/0:12) [ 794.223116][T10496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.231031][T10498] loop1: detected capacity change from 0 to 512 [ 794.238422][T10498] EXT4-fs: Ignoring removed nobh option [ 794.247600][T10496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.268213][T10498] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.11828: invalid indirect mapped block 256 (level 2) [ 794.291862][T10502] loop5: detected capacity change from 0 to 164 [ 794.306979][T10498] EXT4-fs (loop1): Remounting filesystem read-only [ 794.326851][T10498] EXT4-fs (loop1): 2 truncates cleaned up [ 794.333278][T10498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.351211][T10504] loop4: detected capacity change from 0 to 512 [ 794.392876][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.511337][T10514] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11834'. [ 794.550255][T10516] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 794.580260][T10520] EXT4-fs: Ignoring removed nobh option [ 794.586363][T10520] EXT4-fs: inline encryption not supported [ 794.616725][T10520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.643448][T10520] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.11838: Allocating blocks 385-513 which overlap fs metadata [ 794.674614][T10520] EXT4-fs (loop1): pa ffff88810767b5b0: logic 16, phys. 129, len 24 [ 794.683206][T10520] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 794.683874][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11839'. [ 794.727798][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.787906][T10530] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 794.796920][T10528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.826933][T10530] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.11841: invalid indirect mapped block 2683928664 (level 1) [ 794.832190][T10528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.884700][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.893884][T10530] EXT4-fs (loop1): Remounting filesystem read-only [ 794.897463][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.901499][T10530] EXT4-fs (loop1): 1 truncate cleaned up [ 794.916031][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11842'. [ 794.916543][T10530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.929428][T10533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.953953][T10530] EXT4-fs (loop1): shut down requested (1) [ 794.980307][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.076817][T10533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.199025][T10543] EXT4-fs: inline encryption not supported [ 795.205015][T10543] EXT4-fs: Ignoring removed i_version option [ 795.230435][T10543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.251248][T10543] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 795.285806][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.340077][T10549] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 795.352764][T10549] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 795.383719][T10550] netlink: 'syz.4.11849': attribute type 83 has an invalid length. [ 795.455215][ T7041] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 795.973520][T10562] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11852'. [ 797.230057][T10594] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11865'. [ 797.571551][T10597] set_capacity_and_notify: 9 callbacks suppressed [ 797.571571][T10597] loop2: detected capacity change from 0 to 512 [ 798.294411][T10603] loop5: detected capacity change from 0 to 512 [ 798.330855][T10603] EXT4-fs: Ignoring removed mblk_io_submit option [ 798.416018][T10607] loop2: detected capacity change from 0 to 512 [ 798.429683][T10603] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 3: comm syz.5.11869: lblock 0 mapped to illegal pblock 3 (length 1) [ 798.474548][T10607] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.11871: bad orphan inode 11862016 [ 798.491080][T10607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 798.504203][T10603] EXT4-fs (loop5): Remounting filesystem read-only [ 798.511158][T10603] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.11869: error -117 reading directory block [ 798.527719][T10607] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.567944][T10603] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 798.581157][T10607] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 798.590313][T10603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.643703][T10613] netlink: 'syz.1.11866': attribute type 1 has an invalid length. [ 798.651738][T10613] netlink: 'syz.1.11866': attribute type 4 has an invalid length. [ 798.661560][T10613] netlink: 15586 bytes leftover after parsing attributes in process `syz.1.11866'. [ 798.674132][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.826108][T10620] loop5: detected capacity change from 0 to 512 [ 798.873736][T10625] loop1: detected capacity change from 0 to 512 [ 798.890899][T10620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.915201][T10625] EXT4-fs: test_dummy_encryption option not supported [ 798.926543][T10620] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 798.982100][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.009075][T10628] loop9: detected capacity change from 0 to 4096 [ 799.088992][T10628] EXT4-fs: Ignoring removed bh option [ 799.094447][T10628] EXT4-fs: Ignoring removed mblk_io_submit option [ 799.127273][T10632] FAULT_INJECTION: forcing a failure. [ 799.127273][T10632] name failslab, interval 1, probability 0, space 0, times 0 [ 799.141131][T10632] CPU: 1 UID: 0 PID: 10632 Comm: syz.5.11878 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 799.141168][T10632] Tainted: [W]=WARN [ 799.141175][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 799.141265][T10632] Call Trace: [ 799.141273][T10632] [ 799.141285][T10632] __dump_stack+0x1d/0x30 [ 799.141318][T10632] dump_stack_lvl+0x95/0xd0 [ 799.141348][T10632] dump_stack+0x15/0x1b [ 799.141377][T10632] should_fail_ex+0x263/0x280 [ 799.141477][T10632] should_failslab+0x8c/0xb0 [ 799.141542][T10632] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 799.141587][T10632] ? sidtab_sid2str_get+0xa0/0x130 [ 799.141622][T10632] kmemdup_noprof+0x2b/0x70 [ 799.141731][T10632] sidtab_sid2str_get+0xa0/0x130 [ 799.141824][T10632] security_sid_to_context_core+0x1eb/0x2e0 [ 799.141936][T10632] security_sid_to_context+0x27/0x40 [ 799.141970][T10632] selinux_lsmprop_to_secctx+0x67/0xf0 [ 799.142033][T10632] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 799.142081][T10632] audit_log_subj_ctx+0xa4/0x3e0 [ 799.142115][T10632] ? skb_put+0xa9/0xf0 [ 799.142207][T10632] audit_log_task_context+0x48/0x70 [ 799.142249][T10632] audit_log_task+0xf3/0x250 [ 799.142287][T10632] ? kstrtouint+0x76/0xc0 [ 799.142319][T10632] audit_seccomp+0x60/0x100 [ 799.142357][T10632] ? __seccomp_filter+0x8db/0x1350 [ 799.142387][T10632] __seccomp_filter+0x8ec/0x1350 [ 799.142417][T10632] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 799.142455][T10632] ? vfs_write+0x86e/0x9f0 [ 799.142483][T10632] ? __rcu_read_unlock+0x4e/0x70 [ 799.142520][T10632] ? __fget_files+0x184/0x1c0 [ 799.142555][T10632] __secure_computing+0x81/0x150 [ 799.142579][T10632] syscall_trace_enter+0xce/0x1e0 [ 799.142705][T10632] do_syscall_64+0x9a/0x2a0 [ 799.142747][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.142774][T10632] RIP: 0033:0x7f207e95aeb9 [ 799.142795][T10632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.142888][T10632] RSP: 002b:00007f207d3b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 799.142957][T10632] RAX: ffffffffffffffda RBX: 00007f207ebd5fa0 RCX: 00007f207e95aeb9 [ 799.143057][T10632] RDX: 0000000000009000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 799.143074][T10632] RBP: 00007f207d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 799.143092][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.143110][T10632] R13: 00007f207ebd6038 R14: 00007f207ebd5fa0 R15: 00007ffe104e48b8 [ 799.143142][T10632] [ 799.143155][T10632] audit: error in audit_log_subj_ctx [ 799.178762][ T29] audit: type=1326 audit(2000000129.115:36019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e95aeb9 code=0x7ffc0000 [ 799.221600][T10635] loop4: detected capacity change from 0 to 512 [ 799.227644][ T29] audit: type=1326 audit(2000000129.115:36020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f207e95aeb9 code=0x7ffc0000 [ 799.473295][ T29] audit: type=1326 audit(2000000129.115:36021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207e95aeb9 code=0x7ffc0000 [ 799.475271][T10628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.499083][ T29] audit: type=1326 audit(2000000129.115:36022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f207e91b78e code=0x7ffc0000 [ 799.534961][ T29] audit: type=1326 audit(2000000129.115:36023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f207e91b78e code=0x7ffc0000 [ 799.561735][ T29] audit: type=1326 audit(2000000129.115:36024): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f207e95aeb9 code=0x7ffc0000 [ 799.584268][ T29] audit: type=1326 audit(2000000129.265:36025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f207e91b78e code=0x7ffc0000 [ 799.609059][ T29] audit: type=1326 audit(2000000129.265:36026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f207e91b78e code=0x7ffc0000 [ 799.633087][ T29] audit: type=1326 audit(2000000129.265:36027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10631 comm="syz.5.11878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f207e91b78e code=0x7ffc0000 [ 799.669089][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 799.688802][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.736825][T10641] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11884'. [ 801.874961][T10671] loop9: detected capacity change from 0 to 1024 [ 801.900628][T10673] loop2: detected capacity change from 0 to 512 [ 802.350127][T10671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.577219][T10687] loop2: detected capacity change from 0 to 4096 [ 802.603437][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.614661][T10687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.722318][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.743334][T10706] netlink: 236 bytes leftover after parsing attributes in process `syz.9.11903'. [ 803.769737][T10708] netlink: 'syz.5.11904': attribute type 1 has an invalid length. [ 803.778284][T10708] netlink: 'syz.5.11904': attribute type 4 has an invalid length. [ 803.786171][T10708] netlink: 15586 bytes leftover after parsing attributes in process `syz.5.11904'. [ 803.875067][T10714] loop9: detected capacity change from 0 to 512 [ 804.174549][T10721] loop5: detected capacity change from 0 to 512 [ 804.779469][T10721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.799589][T10724] loop9: detected capacity change from 0 to 1024 [ 804.814444][T10724] EXT4-fs: Ignoring removed orlov option [ 804.820815][T10724] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 804.835786][T10721] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 804.909155][T10724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.919522][T10721] EXT4-fs error (device loop5): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.5.11907: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 804.922524][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 804.922537][ T29] audit: type=1400 audit(2000000134.915:36030): avc: denied { rename } for pid=10718 comm="syz.5.11907" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 804.973048][ T29] audit: type=1400 audit(2000000134.915:36031): avc: denied { reparent } for pid=10718 comm="syz.5.11907" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 805.002452][T10724] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.11909: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 805.029325][T10721] EXT4-fs error (device loop5): ext4_get_first_dir_block:3538: inode #12: comm syz.5.11907: directory missing '.' [ 805.039300][T10724] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 805.307938][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.147908][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.551866][T10750] netlink: 'syz.2.11917': attribute type 1 has an invalid length. [ 806.559983][T10750] netlink: 'syz.2.11917': attribute type 4 has an invalid length. [ 806.568295][T10750] netlink: 15586 bytes leftover after parsing attributes in process `syz.2.11917'. [ 806.745100][T10761] loop5: detected capacity change from 0 to 512 [ 807.568224][T10790] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11933'. [ 807.950754][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11941'. [ 807.962628][T10813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.972216][T10813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.199093][T10816] loop2: detected capacity change from 0 to 1024 [ 808.227779][T10816] EXT4-fs: inline encryption not supported [ 808.258412][T10816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.466068][T10833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11949'. [ 808.476020][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11949'. [ 808.489464][T10833] loop1: detected capacity change from 0 to 764 [ 808.496440][T10833] iso9660: Unknown parameter 'iso9660' [ 809.055052][T10841] loop9: detected capacity change from 0 to 512 [ 809.069349][T10816] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 809.138885][T10841] ext4: Unknown parameter 'noacl' [ 809.443664][T10816] EXT4-fs (loop2): Remounting filesystem read-only [ 809.618289][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.471066][T10881] loop4: detected capacity change from 0 to 1024 [ 811.488245][T10884] bridge3: entered promiscuous mode [ 811.521533][T10881] EXT4-fs: Ignoring removed bh option [ 811.716519][T10881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.665899][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811a609a00: rx timeout, send abort [ 812.674741][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811a609a00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 812.835624][T10898] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.11966: Allocating blocks 449-513 which overlap fs metadata [ 812.966317][T10900] loop9: detected capacity change from 0 to 512 [ 812.985762][T10900] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 813.061527][T10897] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.11966: Allocating blocks 497-513 which overlap fs metadata [ 813.414003][T10908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 813.421268][T10908] IPv6: NLM_F_CREATE should be set when creating new route [ 813.428671][T10908] IPv6: NLM_F_CREATE should be set when creating new route [ 814.144024][T10897] EXT4-fs (loop4): pa ffff8881004b6cb0: logic 48, phys. 177, len 21 [ 814.152218][T10897] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 814.187265][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11978'. [ 814.248507][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11974'. [ 814.335432][T10923] netlink: 236 bytes leftover after parsing attributes in process `syz.1.11978'. [ 814.591229][T10925] loop2: detected capacity change from 0 to 2048 [ 814.670978][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.716205][T10925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.776750][T10925] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.790931][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.808416][T10939] loop5: detected capacity change from 0 to 512 [ 814.814074][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.977720][T10943] loop9: detected capacity change from 0 to 4096 [ 815.006386][T10943] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 815.474493][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.504129][T10943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.870645][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.908574][T10957] netlink: 236 bytes leftover after parsing attributes in process `syz.5.11991'. [ 817.040472][T10966] loop9: detected capacity change from 0 to 1024 [ 817.047767][T10966] EXT4-fs: Ignoring removed bh option [ 817.338331][T10966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.740892][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11996'. [ 818.270830][T10986] loop1: detected capacity change from 0 to 512 [ 818.814552][T10994] loop5: detected capacity change from 0 to 512 [ 818.854031][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.906929][T10590] bridge_slave_1: left allmulticast mode [ 818.912956][T10590] bridge_slave_1: left promiscuous mode [ 818.919033][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.042437][T10994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.093581][T10994] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.287154][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.308897][T10590] bond1 (unregistering): (slave geneve2): Releasing active interface [ 819.539198][T10590] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 819.564967][T10590] bridge4 (unregistering): left promiscuous mode [ 819.578479][T11024] loop9: detected capacity change from 0 to 1024 [ 819.617311][T10590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.642426][T11024] EXT4-fs: inline encryption not supported [ 819.643180][T10590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.669236][T10590] bond0 (unregistering): Released all slaves [ 819.684522][T11024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.684867][T11032] netlink: 236 bytes leftover after parsing attributes in process `syz.5.12011'. [ 819.711026][T10590] bond1 (unregistering): Released all slaves [ 819.729841][T10590] bond2 (unregistering): Released all slaves [ 819.749276][T10590] bond3 (unregistering): Released all slaves [ 819.816479][T10590] tipc: Left network mode [ 819.821285][ T29] audit: type=1400 audit(2000000149.805:36032): avc: denied { name_bind } for pid=11038 comm="syz.5.12013" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 819.879865][T10590] hsr_slave_0: left promiscuous mode [ 819.888094][T10590] hsr_slave_1: left promiscuous mode [ 819.907858][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.930031][T10590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.961852][T10590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.984716][T11051] loop9: detected capacity change from 0 to 512 [ 819.993131][T10590] batman_adv: batadv0: Removing interface: macvtap1 [ 820.040054][T11051] EXT4-fs error (device loop9): __ext4_fill_super:5553: inode #2: comm syz.9.12016: inode has both inline data and extents flags [ 820.088460][T11051] EXT4-fs (loop9): get root inode failed [ 820.094371][T11051] EXT4-fs (loop9): mount failed [ 821.621439][T11084] netlink: 236 bytes leftover after parsing attributes in process `syz.1.12025'. [ 821.641053][T11080] loop2: detected capacity change from 0 to 512 [ 821.689149][T10590] team0 (unregistering): Port device team_slave_1 removed [ 821.768376][T10590] team0 (unregistering): Port device team_slave_0 removed [ 822.400308][T11098] loop9: detected capacity change from 0 to 1024 [ 822.422265][T11098] EXT4-fs: inline encryption not supported [ 822.456836][T11098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.735450][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.779706][T10590] IPVS: stop unused estimator thread 0... [ 822.790700][T11126] loop2: detected capacity change from 0 to 2048 [ 822.818697][T11130] netlink: 236 bytes leftover after parsing attributes in process `syz.4.12037'. [ 822.843144][ T4204] loop2: p1 < > p4 [ 822.852374][ T4204] loop2: p4 size 722688 extends beyond EOD, truncated [ 822.928701][T11126] loop_reread_partitions: partition scan of loop2 () failed (rc=-16) [ 822.984974][ T3001] loop2: p1 < > p4 [ 822.993866][ T3001] loop2: p4 size 722688 extends beyond EOD, truncated [ 823.184292][ T29] audit: type=1400 audit(2000000153.175:36033): avc: denied { nlmsg_tty_audit } for pid=11149 comm="syz.2.12042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 823.362148][T11156] loop5: detected capacity change from 0 to 1024 [ 823.429285][T11161] loop1: detected capacity change from 0 to 512 [ 823.439552][T11156] EXT4-fs: Ignoring removed bh option [ 823.476579][T11156] EXT4-fs: Ignoring removed nobh option [ 823.487830][T11161] EXT4-fs: test_dummy_encryption option not supported [ 823.542167][T11156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.575977][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.610248][T11174] netlink: 236 bytes leftover after parsing attributes in process `syz.2.12049'. [ 823.646170][T11179] loop1: detected capacity change from 0 to 1024 [ 823.664410][T11179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 823.707499][ T3592] udevd[3592]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 823.718076][ T4204] udevd[4204]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 823.756817][T11179] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 823.778414][T11189] loop5: detected capacity change from 0 to 512 [ 823.780434][T11179] System zones: 0-1, 3-36 [ 823.805745][T11189] EXT4-fs: test_dummy_encryption option not supported [ 823.821331][T11179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.844681][ T29] audit: type=1400 audit(2000000153.835:36034): avc: denied { map } for pid=11188 comm="syz.5.12052" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 824.005632][T11192] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12054'. [ 824.015881][T11192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12054'. [ 824.029413][T11192] loop2: detected capacity change from 0 to 764 [ 824.036223][T11192] iso9660: Unknown parameter 'iso9660' [ 824.100333][T11195] loop2: detected capacity change from 0 to 128 [ 824.521812][T11192] bio_check_eod: 2506 callbacks suppressed [ 824.521834][T11192] syz.2.12054: attempt to access beyond end of device [ 824.521834][T11192] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 824.606066][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.488669][ T29] audit: type=1326 audit(2000000155.465:36035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.2.12058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d5416aeb9 code=0x0 [ 825.654411][T11218] loop2: detected capacity change from 0 to 512 [ 825.697998][T11221] netlink: 236 bytes leftover after parsing attributes in process `syz.4.12062'. [ 825.873524][T11228] loop1: detected capacity change from 0 to 1024 [ 825.956343][T11228] EXT4-fs: Ignoring removed orlov option [ 825.990692][T11235] loop4: detected capacity change from 0 to 1024 [ 826.021734][T11235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 826.038751][T11235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 826.052637][T11235] System zones: 0-1, 3-36 [ 826.092903][T11228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.107816][T11235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.278717][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.087735][T11259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.113727][T11260] loop4: detected capacity change from 0 to 512 [ 827.141268][T11259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.761018][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.364175][T11276] loop9: detected capacity change from 0 to 1024 [ 828.496926][T11276] EXT4-fs: inline encryption not supported [ 828.530441][T11276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.544338][T11296] loop4: detected capacity change from 0 to 512 [ 829.851563][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.609344][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.618678][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.612396][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12097'. [ 831.652436][T11323] hsr_slave_1 (unregistering): left promiscuous mode [ 831.866936][T11329] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12100'. [ 831.949340][T11329] hsr_slave_0: left promiscuous mode [ 831.969671][T11329] hsr_slave_1: left promiscuous mode [ 832.406444][T11351] bridge_slave_1: left allmulticast mode [ 832.412695][T11351] bridge_slave_1: left promiscuous mode [ 832.418662][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.467871][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.583606][T11372] netlink: 'syz.1.12116': attribute type 27 has an invalid length. [ 833.652420][T11372] bond0: (slave bond_slave_0): Releasing backup interface [ 833.883618][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12113'. [ 834.641672][ T29] audit: type=1400 audit(2000000164.635:36036): avc: denied { attach_queue } for pid=11404 comm="syz.2.12128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 834.810513][T11411] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.12131'. [ 834.901124][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12133'. [ 835.154758][T11421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=11421 comm=syz.1.12135 [ 835.222374][T11426] netlink: 'syz.1.12135': attribute type 29 has an invalid length. [ 835.267007][T11419] netlink: 'syz.1.12135': attribute type 29 has an invalid length. [ 836.002072][T11450] loop4: detected capacity change from 0 to 512 [ 836.046568][T11450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.108360][T11450] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.305171][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.616467][ T9993] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 836.658791][ T9993] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 836.736566][ T9993] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 836.745459][ T9993] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 836.785093][T11493] vlan2: entered promiscuous mode [ 836.790257][T11493] hsr_slave_1: entered promiscuous mode [ 836.795990][T11493] vlan2: entered allmulticast mode [ 836.801362][T11493] hsr_slave_1: entered allmulticast mode [ 836.870229][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12151'. [ 837.008091][T11504] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.12156'. [ 837.202236][T11504] net_ratelimit: 10 callbacks suppressed [ 837.202315][T11504] netlink: zone id is out of range [ 837.213243][T11504] netlink: zone id is out of range [ 837.735484][T11504] netlink: zone id is out of range [ 837.827027][T11504] netlink: set zone limit has 8 unknown bytes [ 838.870630][T11544] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.12164'. [ 838.891451][T11542] loop5: detected capacity change from 0 to 1024 [ 838.929038][T11542] EXT4-fs: inline encryption not supported [ 839.250802][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12169'. [ 839.289384][T11542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.359022][T11542] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 839.412176][T11542] EXT4-fs (loop5): Remounting filesystem read-only [ 839.502385][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.608367][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12177'. [ 839.637416][T11588] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 839.807310][T11598] loop9: detected capacity change from 0 to 1024 [ 839.834793][T11598] EXT4-fs: Ignoring removed orlov option [ 839.876026][T11598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.894147][T11600] netlink: 'syz.1.12184': attribute type 10 has an invalid length. [ 839.927097][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.957626][T11600] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 839.982637][ T9247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.138909][T11609] netlink: 'syz.9.12185': attribute type 10 has an invalid length. [ 840.147291][T11609] netlink: 55 bytes leftover after parsing attributes in process `syz.9.12185'. [ 840.960164][T11637] loop5: detected capacity change from 0 to 1024 [ 840.967243][T11637] EXT4-fs: Ignoring removed orlov option [ 841.000615][T11637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.061009][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.453998][T11664] netlink: 'syz.4.12201': attribute type 10 has an invalid length. [ 841.545466][T11669] loop1: detected capacity change from 0 to 2048 [ 841.564332][T11669] EXT4-fs: Ignoring removed mblk_io_submit option [ 841.648246][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12206'. [ 841.674592][T11669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 841.802067][T11669] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12204: bg 0: block 234: padding at end of block bitmap is not set [ 841.833247][T11669] EXT4-fs (loop1): Remounting filesystem read-only [ 842.125635][ T2412] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.737743][T11702] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 843.062366][T11714] loop2: detected capacity change from 0 to 2048 [ 843.091484][T11714] EXT4-fs: Ignoring removed mblk_io_submit option [ 843.155605][T11714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.188934][T11723] netlink: 'syz.4.12223': attribute type 21 has an invalid length. [ 843.197665][T11723] netlink: 'syz.4.12223': attribute type 11 has an invalid length. [ 843.235385][T11725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12224'. [ 844.044514][T11714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12220: bg 0: block 234: padding at end of block bitmap is not set [ 844.320160][T11714] EXT4-fs (loop2): Remounting filesystem read-only [ 844.562462][ T6708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.678730][T11746] loop5: detected capacity change from 0 to 1024 [ 844.724427][T11746] EXT4-fs: Ignoring removed orlov option [ 844.773404][T11746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.810651][T11749] loop4: detected capacity change from 0 to 1024 [ 844.841415][T11749] EXT4-fs: inline encryption not supported [ 844.849523][ T7041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.881340][T11751] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.12233'. [ 844.916595][T11749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.953442][T11761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12236'. [ 844.977015][T11759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12231'. [ 844.996939][T11761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12236'. [ 845.042045][T11761] netlink: 'syz.1.12236': attribute type 7 has an invalid length. [ 845.051455][T11761] netlink: 'syz.1.12236': attribute type 6 has an invalid length. [ 845.068248][ T4196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.091588][T11768] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 845.166102][T11777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12243'. [ 845.302228][T11777] netlink: 236 bytes leftover after parsing attributes in process `syz.1.12243'. [ 845.936435][T11789] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.12246'. [ 845.972415][T11787] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12247'. [ 846.133243][T11798] netlink: 'syz.1.12251': attribute type 1 has an invalid length. [ 846.141679][T11798] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.12251'. [ 846.165824][T11798] netlink: 'syz.1.12251': attribute type 29 has an invalid length. [ 846.261021][T11803] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 847.209497][T11793] delete_channel: no stack [ 847.458823][T11841] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 847.835630][T11868] netlink: 'syz.4.12276': attribute type 7 has an invalid length. [ 847.845634][T11868] netlink: 'syz.4.12276': attribute type 6 has an invalid length. [ 848.160500][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.168088][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.954031][T11854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.024413][T11862] __nla_validate_parse: 1 callbacks suppressed [ 849.024435][T11862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12276'. [ 849.042699][T11870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.059184][T11870] hsr0: entered promiscuous mode [ 849.064649][T11870] hsr0: entered allmulticast mode [ 849.069948][T11870] hsr_slave_0: entered allmulticast mode [ 849.129116][T16537] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.151764][T16537] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.271911][T16537] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.288907][T16537] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.304476][T11905] netlink: 'syz.1.12288': attribute type 10 has an invalid length. [ 849.312845][T11905] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12288'. [ 849.323213][T11891] netlink: 'syz.4.12286': attribute type 2 has an invalid length. [ 849.331334][T11891] netlink: 'syz.4.12286': attribute type 1 has an invalid length. [ 849.440144][T11910] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.12290'. [ 849.674026][T11911] ================================================================== [ 849.682545][T11911] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 849.691586][T11911] [ 849.694145][T11911] write to 0xffff88811b2446a8 of 8 bytes by task 11908 on cpu 0: [ 849.702596][T11911] shmem_file_splice_read+0x470/0x600 [ 849.708272][T11911] splice_direct_to_actor+0x26e/0x670 [ 849.713774][T11911] do_splice_direct+0x119/0x1a0 [ 849.718842][T11911] do_sendfile+0x382/0x650 [ 849.723315][T11911] __x64_sys_sendfile64+0x105/0x150 [ 849.728752][T11911] x64_sys_call+0x2db1/0x3000 [ 849.733979][T11911] do_syscall_64+0xc0/0x2a0 [ 849.738985][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.744928][T11911] [ 849.747407][T11911] write to 0xffff88811b2446a8 of 8 bytes by task 11911 on cpu 1: [ 849.755248][T11911] shmem_file_splice_read+0x470/0x600 [ 849.761038][T11911] splice_direct_to_actor+0x26e/0x670 [ 849.766589][T11911] do_splice_direct+0x119/0x1a0 [ 849.771657][T11911] do_sendfile+0x382/0x650 [ 849.776219][T11911] __x64_sys_sendfile64+0x105/0x150 [ 849.781745][T11911] x64_sys_call+0x2db1/0x3000 [ 849.786736][T11911] do_syscall_64+0xc0/0x2a0 [ 849.791297][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.797507][T11911] [ 849.799957][T11911] value changed: 0x000000000000239f -> 0x00000000000023a2 [ 849.807102][T11911] [ 849.809550][T11911] Reported by Kernel Concurrency Sanitizer on: [ 849.816420][T11911] CPU: 1 UID: 0 PID: 11911 Comm: syz.9.12289 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 849.828200][T11911] Tainted: [W]=WARN [ 849.832208][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.842483][T11911] ==================================================================