last executing test programs: 1m34.168554456s ago: executing program 32 (id=325): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7716b781d65c4a85, 0x209e, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1m24.451011444s ago: executing program 33 (id=409): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10006, 0x1, 0x31f}, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001ac0)=""/14, 0xe}], 0x2) setreuid(0x0, 0xee00) syz_emit_ethernet(0x74, &(0x7f00000000c0)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@llc={0x0, 0x4e, "831a", "7d6fdd0856369727e2f2d887acd7d072a0c80e1d02996365af15eb71c266c553c11844976ff4e78a893f602c068adf7e3e7a2816dd88ad07cbd1bb111885ec6f9dde9021a59d7f4849005424d292143b627bb55b7fa7289d3b122c9ee784"}}}}}, &(0x7f0000000000)={0x0, 0x1, [0xbc7, 0x8ae, 0x224, 0x257]}) keyctl$clear(0x5, 0xffffffffffffffff) 1m6.273376901s ago: executing program 5 (id=649): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000003c0)='-\t:\xfd\xff\xff\xff\xff\xff\xff$\xdcG|\xbd1\xc2\xb1\x00\xadSP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea\x1fj\xac\xa35\x86\xe5\xechC\x0fz\'\xa9\xb3\x86\r&\"\xe6\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96n#\xae\x19\x87g\xf6\'\xdb\x8e7T\xf1\x91\x8f\x8c,\xd6w\xb5\x97\xeb+(\x90p\x12\x84r7d\x14 \xa8\x8aR:LN\x1a\xe5BQ\x8d\xf8\xf5\xcd:\xd0\fR\xbbw\xab\f{ \x9b\xd1uf\xb3\xbd\xb9\x13Gu\xc7\xabt\xfc\x11=f>1K\xb6\xceI\xde\xa0P\"\xb3\x83\x11\x82\x90\x86\xe9\xa1\xb8r\f\xd3\xdeQ\x19\xc0w\xb9\x1b\x01\x11\x82\xff\xde%\x833\xb2\xcd4\x8a\xbb6\x80\x1d\a\xe1\xc2\x06\xc8\x99e\x93\xb2\x1c\"\xcf\xba\x13\x0f\xcd\xd5\xff\xc1st\xe1Q\x90\x81|Y\xfb\xc4D\xfe\xf4\xcet\x16a\b1\xd6B\x80\xca\xdb\x92@q\xac\x9dc\x03bc\xd8\xac\xae\xac\x10\xd3>A)x\x7fC=\x1a\xb641MB\xae\xe4\n\x80\x1cks\xdd\x90\x92\xf1\xa4\xf7\xbb\x86D2%\xc4\x9e0\x82\xc0\xff\x03\xc9\xc3\xa25\x88V\xfc\xaa\xc7\xeaf.\xe2\x8aMp\xd5;\x06\xfd\xa1\x86\xf1\x9e\x11\x96|\xa2\xaf\xf6V\xecI%7\\\x81\x12\x9a\xf3pW\x1dp~\x97\xcc1\xd2=\xf0\xd8b\xd6\x8c\x7f\xecVF/_\x87\xac\xfa\x1c\xad\x9cN\xbe\xea\x19\x1b\x179\xa5C\xa4@q\xc9~\x92)\x0eL\xb9q\x1b\x91/V3\xcf\xfb\xac]\x81\xb6\xfa\xb0+\xb6\x8f\xb2uM\xfbt3\x88\x96\xb0_{\xbf\xc3\x1c\tPK\x06\xb7\x89\xe8L\xff\xbclU\x10\xdfy\xce\x152\xc9\x97\xe7\x1c-\xc8\x90F\xcb\x9bT\xa8u\xc3\xfb\x12T\xcf\x02\xb23\x85\xc2\xa1Z\xed\x04nTi\x15m\xfa[\x03\x03\xb3\x95@\\\xbd\x13\x8e\x99\x89e\x8cq\xdc\x02?\x1d7\xe0\xa9\xaa4\xd1\xaeY\xee\xba\"#\n\x02\x99\xf3\xe8\xce\xe0\xe4lB\r\x98(\xa1\xca\xc7\xa1\xd2W^\xe1\xe6:\xb03\x91fe\xc2\xaa\x9e\xb8$\x93\x0e\xa9\xba\xb4T\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}], 0x3, 0x400000a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) syz_io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x900389b, 0x1c481, 0x0, 0x3b2}, 0x0, 0x0) 1m6.104159172s ago: executing program 5 (id=650): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x3, &(0x7f0000000000)={0x8, 0x0, 0x8000}) lgetxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@random={'trusted.', 'security.capability\x00'}, &(0x7f0000000f80)=""/4096, 0x1000) 1m6.025305449s ago: executing program 5 (id=653): getgroups(0x5, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0xffffffffffffffff]) (async, rerun: 32) r3 = getgid() (async, rerun: 32) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) setresgid(r1, r3, r6) (async) setgroups(0x2, &(0x7f0000000100)=[r3, r1]) (async, rerun: 32) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10, 0x80800) (rerun: 32) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) (async) getsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f0000000200)={@local, @multicast1}, &(0x7f0000000240)=0x8) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000000300)={0x1, 0x9}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000ec0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000003c0)={0xaa0, r9, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x138, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd7, 0x3, "ef9180cc457e0ec0126275f0ebc31e7e5e8362af85077fd2137f700824a37b342b9d6817f2ed1e30c68d0b51dc7dbf213deb8f29626f00d18b9d5511d5b96bf1acd93553bf90b6f662c0bb2a42e0375427143eaa9a0c04fc1b6af12de2cbd641ca4cc9d79d3468bb3a9371bfbb9e621aabd7e2df6d263a460c1235cde3eba2e347f1412fde5f6bf00a98e095bd2871a2ce85757f0eff41234a69ab4d2ad176f2045c975cc61b0b86a019373930c15ef7baaa351e44626b5a3c588da896b2d19dd9859580e5cff44024eb7503dcc62dfa74bd1b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4f, 0x3, "5064544f86d0a712c30eb90eb5258f9ed5b97f35efbc99c38dcf97ac7288287ce36101508fd84f3be62a2b11f6c1a480ff07b36b14abdbc7fa0dbf6ef69ac21c4b45221ec899106ba9bc1b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x9e, 0xf, [@mesh_chsw={0x76, 0x6, {0x83, 0x8, 0x3, 0x5191}}, @chsw_timing={0x68, 0x4, {0x8666, 0x2}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xb9, 0xb}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x8, 0xf9, @device_a, 0x100, 0x466, 0x800}}, @random={0x6, 0x60, "692425583d25dd78c858c3ebd3906c7c6ae1a4fad4a23a9dbf99571af2a0a8e27e6d85d9c83f2d8242dfbb4701d3e9314185fce54fa483149755e3235025650eb609e24e8f120b0085cce41669ff0859cf47dd160a573372f15ffa29d7cc38ed"}, @channel_switch={0x25, 0x3, {0x1, 0x38, 0x2}}, @channel_switch={0x25, 0x3, {0x0, 0xd, 0x4}}, @dsss={0x3, 0x1, 0xac}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_PROBE_RESP={0x66c, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x62, 0xf, [@preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0xb2, 0xc7, 0x1, @device_a, 0xe, @value=@broadcast, 0x7, 0xc8e, 0x4, [{{0x1}, @device_a, 0x638a}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffff9}, {{}, @broadcast, 0xa31}, {{}, @device_a, 0x3}]}}, @supported_rates, @gcr_ga={0xbd, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x42, 0x40, 0x4}}]}, @NL80211_ATTR_FTM_RESPONDER={0xfc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xee, 0x2, "71b92be404d79d389ef7512fbb3de87854cbc9ad07f2a1cdb04a98c18f896b6b6cdc942a7bd3bcad874501bcab6cf0fae846b9a14cde29db8546833f9bb269736c9235862d999585876feca087ff40a2e7cf561fee0f2f675d75edd7ea65dab1c556c4c8f6130062cd8c99f9df7b46ab5d5bea73a5c10900ae543eb8493d3d2c8c33a29737a5c8d096aefe4ff992c684e71d20fe692018b45e029634570bf75dd7afb5dd504550d30b2774820ecdc6630785cad34b003df41642b471a8063596c6faa9dc2dca2608c69a30c381512c4ee3a7a228f349429ba415d73a54564f0c0070864a7ee72c3e127f"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x63, 0x7f, [@supported_rates, @dsss={0x3, 0x1, 0xaf}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0xfe, @broadcast, 0x0, @value=@broadcast, 0x7, 0x4e9, @device_b, 0x3}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @supported_rates={0x1, 0x7, [{0x4, 0x1}, {0x36}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x35}, {0x36}]}, @mic={0x8c, 0x18, {0x191, "ff4875313568", @long="ce84477fdf4c72b81278094085913454"}}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0xd}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x6f, 0x80, [@tim={0x5, 0x18, {0x40, 0x59, 0x3, "6234e8286146174c42ace0b54290871dd8a089aed4"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x59, 0x60}}, @measure_req={0x26, 0x46, {0x9, 0x40, 0xd, "c7f5c25df014b5327c6be23c00ce56c48c6b8ab6b7a68a84058650e1660c6156771da093f04455bfb673d76e816f092841d1d5887733402910ce129a64ecc5701320d7"}}]}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{r8, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%-5lx \x00'}, 0x20) (async, rerun: 32) getgroups(0x4, &(0x7f0000000fc0)=[r4, r2, r0, r5]) (async, rerun: 32) fchdir(r10) r15 = openat2(r8, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x1c1000, 0x12}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0xb0, 0x1403, 0x800, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}]}, 0xb0}}, 0x24004810) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001200), r16) (async, rerun: 64) statx(r8, &(0x7f0000001240)='./file0\x00', 0x1000, 0x100, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000001380)={0x5, {{0xa, 0x4e24, 0x8, @private0, 0x2}}, {{0xa, 0x4e22, 0x800000, @rand_addr=' \x01\x00', 0x4c}}}, 0x108) (async) r18 = getpgrp(0x0) r19 = syz_open_procfs(r18, &(0x7f00000014c0)='net\x00') r20 = socket(0x2c, 0x800, 0x5) setsockopt$sock_void(r20, 0x1, 0x24, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x2d2800, &(0x7f0000001580)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r15}, 0x2c, {[{@directio}, {@mmap}, {@cache_fscache}, {@posixacl}, {@uname={'uname', 0x3d, 'syz0\x00'}}, {@cache_readahead}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@smackfsroot={'smackfsroot', 0x3d, 'macvlan1\x00'}}]}}) r21 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002800)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmmsg$unix(r8, &(0x7f0000002fc0)=[{{&(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="026de2776d746ac71f333621e234597a3d67f6efa295b4674eb256acc08952fc503b681866bcfee7feaf3565592c8df8a3c54a9ab78c6d8d9ad7e1e24898424cfa77531c73a68e78c01d032751b6238f4b9b5ed052ba18fe4e67cf663b5120d801930e99926d39ba59", 0x69}, {&(0x7f0000002740)="a1eb468b15de8b9110a6f399204cd7df63d692718be777b1e931856a129fcc0b1f2cf653981b3d1a5725e92a385c1abd2fb95e13b5aa1de63695428425569c83fea717436b2c53c586c853f57382f7af627079639c1f3c73fe136069189b3007486807a02e1fe4687cca304e6b6d95b0a4d818c27a47a4a176e00e164b41", 0x7e}], 0x3, &(0x7f0000002a40)=[@rights={{0x20, 0x1, 0x1, [r21, r7, r15, r12]}}, @cred={{0x1c, 0x1, 0x2, {r18, r17, r13}}}, @rights={{0x30, 0x1, 0x1, [r19, 0xffffffffffffffff, r20, r15, r12, r10, r7, r19]}}, @rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r18, r17, r14}}}, @rights={{0x24, 0x1, 0x1, [r20, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r20, r8, r15, r10, 0xffffffffffffffff, r10, r19, 0xffffffffffffffff, r15, r8]}}, @cred={{0x1c, 0x1, 0x2, {r18, r17, r2}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @cred={{0x1c, 0x1, 0x2, {r18, r17}}}], 0x168, 0x20000040}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, 0x0, 0x0, 0x44080}}, {{&(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002c80)="c7f3baa1", 0x4}, {&(0x7f0000002cc0)="9a1657d76bc9b290067f9c70bfbee5e0530d95ff28cb7906a88e0935d37135f3f00ba88ca9deb7f09e075a6dfbc09138c3a7e0031778770e7ab6f3e1a4225e911eb68f49e4e93f8b097821506637c91156439b231f3674fecfc5f65012af775de7d0e8212f80d8f38d914471", 0x6c}, {&(0x7f0000002d40)="68beab9eeeec17281f90329d509f16467bc6439a511cd3d18ab48927e3468d9990e59728e83457767e2a5462e1c55dc5f3ca", 0x32}], 0x3, &(0x7f0000002e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r12, r15, r10, r19, r19, r8]}}, @rights={{0x1c, 0x1, 0x1, [r12, r15, r10]}}, @rights={{0x1c, 0x1, 0x1, [r8, 0xffffffffffffffff, r15]}}], 0x70, 0x4000001}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002ec0)="839c30ebe9154f13a4c225d5fcd4bb5caee174ec3c8adeb3ab757fe1f2291a47aff476c4d72fc7f1ce4b37722c533bb243058f95ed5d60481fa0e5b2a9bee846e5bd8997ddb8007a6d64bdf54cbaf552e73acc942d087e71c1331ee4587655001a57518c6d0bc455", 0x68}, {&(0x7f0000002f40)="f43d66928880e53a2a67d5febc43464e16db678c", 0x14}], 0x2, 0x0, 0x0, 0x20000804}}], 0x4, 0x0) 1m5.956208898s ago: executing program 5 (id=656): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48080) socket(0x2b, 0x4, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000380)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8000}}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r2 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0, 0x300}) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xffffffffffffba47) pipe2$9p(&(0x7f00000000c0), 0x84080) socket$packet(0x11, 0x3, 0x300) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48080) (async) socket(0x2b, 0x4, 0x9) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000380)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8000}}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") (async) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0, 0x300}) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0xffffffffffffba47) (async) pipe2$9p(&(0x7f00000000c0), 0x84080) (async) 1m5.137468571s ago: executing program 5 (id=668): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(r1) (async) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000400)=0x9, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000400)=0x9, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @local}, &(0x7f0000000080)=0xc) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x1, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x1, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x0, 0x2, 0x0, &(0x7f0000000380)="f6f4", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r5, 0xffffffffffffffff, 0x18, 0x20, 0x0, @void, @void, @void, @value, r4}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r5, 0xffffffffffffffff, 0x18, 0x20, 0x0, @void, @void, @void, @value, r4}, 0x20) 1m4.65170404s ago: executing program 5 (id=672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040c94}, 0x4000000) 1m4.512245817s ago: executing program 34 (id=672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040c94}, 0x4000000) 1m3.425533115s ago: executing program 3 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4269, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xe}, 0x19196, 0x20000, 0x43a1bd76, 0x1, 0x2c9, 0x2, 0x4, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000200)=0x8e5b, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xfffffffb, 0x100000, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x1, 0x1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) getsockname$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}}, 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1m1.923939854s ago: executing program 3 (id=689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1004000}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x106, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 1m1.781201601s ago: executing program 3 (id=693): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x1000000000000002) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0xf1, 0x9, 0x2, 0x7f, 0xfff, 0x3}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x9, 0xdedb, 0xc, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x3, 0x8, 0x7cb, 0x3, 0x11, "7d5f4045c7948abb"}) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000500)={0x0, 0x84f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpgid(0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x6000, 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r7, &(0x7f0000000940)='./file0\x00', r8, r9, 0x1000) setregid(r6, r9) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecf2dba1371f375, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}}, 0x0) 1m1.641372568s ago: executing program 3 (id=696): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4040000) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x8cffffffffffffff) 1m1.367678162s ago: executing program 3 (id=701): socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2000400c) listen(r0, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xa00000000000000, 0x7fffffff}, 0x0, 0x0) 1m0.873407119s ago: executing program 3 (id=713): syz_usb_connect(0x0, 0x24, &(0x7f0000003440)=ANY=[@ANYRES64, @ANYRES64, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESOCT], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x3, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000180)=0x9, 0x0, 0x4) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/220, 0xffffffffffffff86}, {&(0x7f00000005c0)=""/27, 0x1b}], 0x9, &(0x7f00000017c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/25, 0x19}, {&(0x7f0000001b80)=""/165, 0xa5}, {&(0x7f0000001c40)=""/222, 0xde}], 0x4, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000003200)=[{&(0x7f0000001840)=""/25, 0x17}, {&(0x7f0000001f00)=""/243, 0xf3}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/12, 0xc}, {&(0x7f0000003040)=""/166, 0xa6}, {&(0x7f0000003100)=""/222, 0xde}], 0x6, &(0x7f0000003280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x0, 0x20012103, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) flock(r6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000034c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x4004) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x7}, {0x2, 0x0, 0x4, 0x8}]}, 0x94) 1m0.872800829s ago: executing program 35 (id=713): syz_usb_connect(0x0, 0x24, &(0x7f0000003440)=ANY=[@ANYRES64, @ANYRES64, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESOCT], 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x3, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000180)=0x9, 0x0, 0x4) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/220, 0xffffffffffffff86}, {&(0x7f00000005c0)=""/27, 0x1b}], 0x9, &(0x7f00000017c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000001a40)=""/213, 0xd5}, {&(0x7f0000001b40)=""/25, 0x19}, {&(0x7f0000001b80)=""/165, 0xa5}, {&(0x7f0000001c40)=""/222, 0xde}], 0x4, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000003200)=[{&(0x7f0000001840)=""/25, 0x17}, {&(0x7f0000001f00)=""/243, 0xf3}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/12, 0xc}, {&(0x7f0000003040)=""/166, 0xa6}, {&(0x7f0000003100)=""/222, 0xde}], 0x6, &(0x7f0000003280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}], 0x0, 0x20012103, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) flock(r6, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000034c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x4004) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x7}, {0x2, 0x0, 0x4, 0x8}]}, 0x94) 55.162813207s ago: executing program 6 (id=803): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003040000800000000000000000", @ANYRES32=0x0, @ANYBLOB="30080000000000002cde118009000100626f6e64000000001c000280060019000700006c6d30"], 0x4c}, 0x1, 0xba01}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xb6, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xa8, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6c, 0x0, [{0x6, 0x7, "e2ffb28c59"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91f6dc"}, {0x6, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 55.137929152s ago: executing program 6 (id=804): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) syz_io_uring_setup(0x4a9a, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, 0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) listen(r1, 0x8b25714e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0xfffffffa, 0xffffffff, 0x2, 0x3, "fd126371755f4121b02fb59ae92f8c98a40e52"}) 54.629760418s ago: executing program 6 (id=807): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0x4fb, &(0x7f00000009c0)=0x0) r3 = eventfd2(0x9, 0x80801) io_submit(r2, 0x2, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000006c0)="2027a9397b842a3be93d9cf30a2eccd55a1f8fcd4d0030eec0af58249a1e46d9754d10b2d54f1e7600cb4e08a7198b317ebe6cdf1145381150a7cc31b34b783a8b4c9b4f74fef737a055f1dd2996e54f07ec539ace40a83bb28727613ada4f1ce71bd4f506a6db7dc6e7e68233ca034f6f6299fe83f41c5d60c5911c70043fa285a29d690ccdd4dcdf13521f1ddbdb2b249166758634628b8c7bee3bc44151003fef207f189c0c524a5a16856afb8665ebedecb11b577343", 0xb8, 0xfffffffffffffffe}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000000800)="20d40b582656f03e3400d9c63b7daaf12520973c368fdc8ef45cea1d0f5d0c668d8101622a74cded32ba1d5a058902a89f0efe247ae12f8acf730f8630b4a17f494d41a94182ac6eea094570e5e64767fd0a35978a5412b90973361335aac96e93ea864de1ba9fad193fe585c8158fb68fe132da2991eb862a8c32b89c06ccbb1b4b9261d4485c6b932bba03ac44764320", 0x91, 0x7, 0x0, 0x2, r3}]) r4 = eventfd2(0xb, 0x400) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xfffa, r0, &(0x7f00000001c0)="e7463b88bb819744d4dae012eb5606841af12c494c54702085ff1de137cf25836a4444fc0b1b452ce43694e371a6b538dc7eee0c0cad012482955ca79e73f3f4d729244900a5d66042db811f6f6e7ac3cfb1ede5d7fcb4385fcb4b437ba20c245c8987b2aaeec1fc9a65d3cefa755927294e9862b76e07c0fb2d1cac86bd5d6fac60e05c0b77049255db6e9e78c80e39cb8c3323c2d49601912c19ff08062843af1f08d4f2dc199a27b01607bc0711881ab287bb1110ab28b974393d2fe5508e", 0xc0, 0xd, 0x0, 0x2, r4}, &(0x7f00000002c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r7) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = syz_io_uring_setup(0x643c, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x1a4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) io_pgetevents(r2, 0x5, 0x1, &(0x7f0000000480)=[{}], &(0x7f0000000500)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x8000000000000001]}, 0x8}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f00000007c0)={0x0, 0x47, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf25080000000c00018008000100", @ANYRES32=r15, @ANYBLOB="003d7b0100000000"], 0x40}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 54.334005678s ago: executing program 6 (id=811): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10882, 0x9d) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xea60}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x5, 0x800, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newqdisc={0x160, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x130, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffa, 0x8, 0x7, 0x1a, 0x20, 0x9, 0x7}}]}}]}, 0x160}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000200)='./bus\x00', &(0x7f00000005c0)='selinuxfs\x00', 0x884, &(0x7f0000000580)='Gots') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x80280, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000600)) 54.007534144s ago: executing program 6 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0xc0) waitid(0x1, 0x0, 0x0, 0x8, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x2, 0x3, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) unshare(0x400) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8002, &(0x7f0000000140)={[{@quota}, {}, {@nodiscard}, {@delalloc}, {@resgid}, {@jqfmt_vfsv0}, {@init_itable}]}, 0xff, 0x4b4, &(0x7f0000000c80)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4}) eventfd2(0x6, 0x80800) 53.692421631s ago: executing program 6 (id=824): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0xe8030000}, 0x1c, 0x0}}], 0x1, 0x4004000) 53.632988921s ago: executing program 36 (id=824): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0xe8030000}, 0x1c, 0x0}}], 0x1, 0x4004000) 41.819166529s ago: executing program 7 (id=941): socketpair(0x1, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x4a, r0}, './file0\x00'}) 41.76567317s ago: executing program 7 (id=944): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8087, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x110b29, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x330}}, 0x4008800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x80, r2, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x99}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 41.718141803s ago: executing program 7 (id=945): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000001c0)={'team_slave_1\x00', @ifru_settings={0xde7, 0x5, @fr_pvc_info=0x0}}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x9, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0xffff, 0x0, 0x3d42, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40) 40.755141282s ago: executing program 7 (id=960): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r4}, [@IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000004c0)={0x20, r5, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="00042abd7000fcdbdf2523000000050026000200000005002500020000000500250008000000050025000e0000000500280001000000", @ANYRES64, @ANYRESDEC=r2, @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x48084}, 0x4881) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r12, 0x1, 0x0, 0x200000, {{}, {}, {0x14, 0x19, {0xfffffffd, 0x9}}}}, 0x30}, 0x1, 0x0, 0x0, 0x240080c0}, 0x0) write$binfmt_script(r10, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x2c, 0x15, 0x300, 0x70bd2d, 0x25dfdbfb, {0xa, 0x10, 0xa6, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r14}, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000010c0)) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000000c0)=0x2) ioctl$GIO_UNISCRNMAP(r0, 0x4b52, &(0x7f00000000c0)=""/110) 40.545415067s ago: executing program 7 (id=964): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus/file0\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) accept$unix(r4, 0x0, &(0x7f0000000400)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@migrate={0x7c, 0x21, 0x800, 0x70bd25, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0xfffc, 0x4e20, 0x7, 0xa, 0xa0, 0x20, 0x2f, r5, 0xffffffffffffffff}}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in6=@mcast1, 0x0, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 10.697319576s ago: executing program 8 (id=1291): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) (async) r2 = epoll_create(0x5) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="25a82dc9cd1ddf40844a7861b0ac4811ea87f6e0c6c57dce25561ba86f773b31194ed84dee3626cc6173bcd01792d97c5a6ebf625eeefaba44c2689563a2a8c5a212e40d4edf9fbfca641614a1f5dd3696bccddd3e498fbb4e5172eea11d896d7b3f854107e3a1fd45f9d5b5ccc732d11b0a0e4722c2d00acfb05499c6775a672fd1f88d8798ede20c21b9159915106fd1565d1459f41faf1231c6e94d35763674b0373e7673d13887dad651472fd71aa20ae75612f1ab26f10409513b37f04dd57c27cd143641c65a44cdba3490ef985ca547f6a0c2c147064c6136b707d8d272a0114e651076d7999be51a9695a64b9b1e0e1a840000f5a7d0dfe20aa3a03130e120e05389dd66c7388fb3845a4fb41790c8e42de1889fb46e4a8dd072b1e25baa343b8828fc2a6ad0b4f81330b6830bd5a92135e8b3684b5d26f264763232d6bf0eeb51d504f6d46f21434ccbe78b1ac78ca68c15997cfa5357a9a02d28d041e751394f990b5c8966a5476c3d42a825b86029335b65d22c8644004c72ab6699e2cb7c9f7da0aed03bb0d9e692dd0adca744f9c61a64ced8d882782124a1552d1feae11a4d636abb763bc5f90c4ea8027e617e369ce96e2433c107f28b522b627c091b90a35f7ad58c9b03c7fe40d4ff19369f9417c4d428d7835d4f4a903085619be46f6e82c9d204663a8cc6f8130ea0c7e32866704201db878acf34f3872099034043b2fc8dfe1646e9770bf4b8fdb5c1c33bdfdd9de720881dc8fe0208813d6ef537d90a76f9b4fbd3f10a66efc669a47e7281fadf301f494549cb85585f7439e20a71baa1df36840a6e95f7d4398dfb0e35bf34d99699891f5da2df0c3447905ac46c551dc773b40855e93e125738c818fecd6730b2a50e14bea86f5cf6fd054e5f5a28c646e8575b9226ee05d459452a6b9938e57038d1147c8e577f1dc1b592d866da2f32eeed236eff5b3812fbfc282aa908b2bc2d64dde38379cae887bf6861d7992e68fae88ecf255d6e3570c42cde60ad2e2a2a25617a226670a6f7a7bd3782fad0f5e2ec1d735fb96186e275f5d88f1d95fb98edb37003fc6dc445de3e56fa9ff71cd82ccebaa74e959208f01631eed9ee92086882216858c9342582d5f97da538e1b5dbbdadb7965eadc8330eb8f92010c35bebb3dacaddd98fd7b7098fe859947b163adfdaef1621776d8ebee30b676272bf198ead0ec728b6596e4f981325fc12264d0e79ac56f69dfd2cbe3b4d0b0a8c1100857a06cb9abc8b735040fbf7d201679d2145752b7b31a01e3b3613c373246cdbbcd2c459c4c4e34497ff70900d54917b1ddf631a7247a96842a871e2d48289988e5096cf9c1f63344cc2360691186175d11b252b9f8248b0f3c4c7aac6b5acfa35007b8bf65101ed63aa7e0e7e69db030cf3582d4318eaf16dd79b50d2a9785b0e4214b5e68071c48f423cfad90b375ee7c0beabfeeb25c315db3f68c32bdee01f5a0dd3b1129b2380b99169ae7a2d0b2f80613c58e26bc417ecbd51cd1065122a073de71bbf49ada37d3ac3f3152a967779d3deeb7957bae06fff2b5b6f02a00a14ce7637ba7badd270e0986578b8a99199a1c7c4dd771da92e75b00d1d9a43150c7bb4d7330bf3649745c305be87e5f290e1f691036009e5d23bdb27f14aade6edcbcd8bf06b8329adf1b4a3aaa8774a52ca999252c0f17956344927a7deb0d8bfbf704fbad8042daefd8fa9483791ee778fa926d5e87b33192966b836267634798a81229d8796104eec8df0af0c088c5cee80604f972b58fde2637eb63bef809b4bd84a04cd7dc9d3b1cb82c1969bc90d9d4dc8e17d9aef394aeeb6077014416a3a889486ab8d25ed746ed1bd136db044b87b0822d6c802e066bf93d8a08f8651e7d1e24f8929fc99e68d46b0fc83868ac19e6efe353e86339bcfbe8b03de067b7540a231589611da0ff648339cd15bb16363083faa91dfc14ace2b6de13acaf9f26bfcea604c1626d3ae91c2f858f1cca3d962a0671aab5db8568761aa3bc0bd6dba8569bb6a99ce2ccf563d2b2a88d603ec45f97f29663514542662c337245919f250ecc00f898c7c305c4ef4ec2a8516b50d4de6963f7aba071bbb48bd0cf4432a66b14839bb2f10fb6820d448bba9a506b2c3bcc2cd231260b25d8bc9da51b5b34543942e2bc88df0b8103259cfe3b6be1ff46c10253bb6864d0c5925ec60dc3a6d2b16c95c253fdc06187c412f6796d90adc369f52ec983b237eb7496d2bd0aecc09103a7280efe5296edcac83de7e2ae9cd41f70098e9b937bf0b0bc59b40a81fdfc3c480c22d74daf5eaea9ec527742cc7f56d715143d2212713bb2c68851476a4632a4a702af849587910bb2c364a4d67af7739d478a1bef6d523602eb4bf99ab4e0b97e520ab6cb2f821b4949b5933dd239cd998f9873f58de353e564d3aa6c0a7519a46ce7accdf0b55d0c620ded0c7096a3dff3d8a4df69109f9a539eee919404a2e853ec0c6a3a13b4dedebd52ec7bb2e0bf70a38edb3cdba35867631f61d46e66fbfd7b50a5bd4d51ba4eb480505350d855f12b49797c10b198e530578f7f89abe23cb60ce859e479d7b0a030f55a64ae3868cf8132d8eb0bbbae8b977927347ee3e7a88ea308644a65cab31fe6335683755e46e9b645e5c47ceb6c92eb74a0bcbb2636c7acd5ad51962e8088a9c79b2fdcbb0e47b4a0a2b55d94ebbfbd8551b5be6bf15903594c300e5e38d374c6c650bb12fbed1e9e7ff62a2fd189ad790ab101f62be52bb795bad21cd22bdceead43e32b5df376f90ff9d2ad53e8b8b733576e98f42badc2a3ae7a1ba557a51528713e415f9e8ad19d54ec3311dc83014209010adce4c464f83d69c7f9c8f5133eca8e6dcc62271de62f9bba7703ee93154fd37c6607619dd55913973bc2a7647ac1b8413fe17ce92f92f34963b35c514be9a01906e028b83eb902f4361525e8e3814792be61c1742aa3ce0a570b5588f6279f482f418e7764a5961c19b7c3355406a009e2ce676f960965b0ff07492926131c5459d7fcdbe2d40fe8cd5bd9bc770468139b078d3f34636f59c5534a066d6d83da7b7fcf78c3a93ecb258983278a707f321e293487f02eed193b0974786dee5fb96592cad956adde1cde7e6dbcf9144fad8997d5dc73ff6eec9ec0281936a966ca68fd4215a2fc4c49e010580f9e486babbb169cd9857a26cb630fadd7c9cf73ddc5e5161bed401840e7f8478a74df508b26cc52269afb18a5b1947dd5ccad2c89248781b9292f69514db4e62860bedf7bf06b8554f1cacde741a7dd2c7e1f3e9ffe0dd222363c04f1267033f3051bed78cde6594957d91ca1d2c7a93a9bcbd523af28abd538f9727b6d33870879b59832d6fa8e6a1abd0d093b8b9c219c4ff42b5a988bb4b140481a415f5a9a017c1447adc3441d9d7bc930305cdb535869411e20835171a90c240f9acabdaeb4a5c6535bae58ba848f57ca52aeb0b7966e5817c0c12198c255e9a029213cdb0be33ca6932bd8b0add3993aafc9e31e69a44a7665267d833e0a1dff753887c339136475022dadf4daf08127f99da5a9b55ca45cf4be7fd91983c85faed7d6742874e27fbae4839602077ff9da9571524b86d57c704283f7d16d07fad19e731b19bfc87a7c9b7091a2fbdcbd3a066c197fdf47c3979e3e38f37bd6633ee6bcf59dac609e2e78ef7f87126f26cdb97185fc0626ca6d824b4186b191066ac7ead7f51a29a185d6368204c4b3f98f4bd69c584d320e4a489853c32e5438cbe2e016f35491340cd771ab57a499bbdd9db0a", 0xa81}, {&(0x7f0000000cc0)="534813fd624494b569f674c9d30114c45c6dc3d08a8bb32ab4a4eb01aeca81ca7fc125376bd58fdea30c3b5b007e1b73c4e6c8a7d8cdefde3e46", 0x3a}], 0x2) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x3}) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x1, 0x280000000, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7, 0x1d}) (async) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0xcab, 0x0, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000000c0)={0x101, 0x800, 0x80}) (async) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 10.639042466s ago: executing program 8 (id=1293): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) syz_io_uring_setup(0x4a9a, &(0x7f0000000380)={0x0, 0x4093, 0x10100, 0x10000003, 0x13a}, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_io_uring_submit(r5, r4, 0x0) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) listen(r1, 0x8b25714e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4126}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x7, 0xfffffffa, 0xffffffff, 0x2, 0x3, "fd126371755f4121b02fb59ae92f8c98a40e52"}) 10.216852895s ago: executing program 8 (id=1297): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4040000) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0xffffffffffffff8c) 9.974274905s ago: executing program 8 (id=1300): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB='\v\x00'], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x40}}, './bus\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000009c0)={0x9, 0x3fffffffc00, 0x5, 0x87f}) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) 9.675725225s ago: executing program 8 (id=1302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r3 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x1e76, 0xf724, 0x44, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r4, 0x4b3d, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911103000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) (async) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r1, 0x1e76, 0xf724, 0x44, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSKBMETA(r4, 0x4b3d, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911103000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) 9.653273071s ago: executing program 38 (id=1302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r3 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x1e76, 0xf724, 0x44, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r4, 0x4b3d, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911103000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) (async) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) io_uring_enter(r1, 0x1e76, 0xf724, 0x44, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSKBMETA(r4, 0x4b3d, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911103000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) 5.998382021s ago: executing program 1 (id=1324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c020000190001000000002000000000fc0200000000000000000000000000000000000000000000000000000000000000000040000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000004d32b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000ac1414aa000000000000000000000000000000000100000000000000ffffffff0000000000000000000000000000000000000001000000003c00000002000000fc0000000000000000000000000000010000000001030000000000000600000000000000fc010000000000000000000000000000000000003c"], 0x23c}}, 0x0) 5.975935657s ago: executing program 1 (id=1326): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'veth0_virt_wifi\x00', &(0x7f00000006c0)=@ethtool_gstrings={0x1b, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x225fa46b}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x3000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 5.916245837s ago: executing program 1 (id=1327): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) mbind(&(0x7f00003f7000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x46, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0xec, 0x80, 0x1, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x700, 0x6}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000940)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x2, 0x62f, 0x50, @private2, @mcast2, 0x7, 0x0, 0x9, 0x1}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40811) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10"], 0x48) (async) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) (async) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file1\x00') (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090300000000000000001d00000018"], 0x2c}}, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.765478472s ago: executing program 1 (id=1328): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x10e212, 0x3, 0x20da, 0x3, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getpriority(0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf251a00000006002100610000002000228004"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) file_getattr(r4, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x18, 0x100) pwrite64(r4, &(0x7f0000000140), 0x0, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r5, 0x3, 0x4100, 0x8000c62) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") io_uring_enter(0xffffffffffffffff, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000127000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xeffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r6, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000440)={0x1ff, 0x8, 0x4, 0x4, 0x0, 0xa, 0x9, 0x103}, 0x20) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000002200)='9', 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40830) unlink(&(0x7f00000001c0)='./file1\x00') shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 4.261434711s ago: executing program 4 (id=1339): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x6, 0x2b0, &(0x7f0000000280)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) unshare(0x22020400) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101401, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x42, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0xd) getdents64(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff01000000000000000000000000000100000000000000000200010000000000000007fd0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4b906", 0x48, 0x3a, 0x1, @private1, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x4000, 0x33, 0x0, @loopback, @empty, [@srh={0x33, 0x2, 0x4, 0x1, 0x6, 0x70, 0xff, [@local]}]}}}}}}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f00000017c0)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x3, 0x14, 0x68, 0x0, 0x3, 0x2b, 0x0, @broadcast, @multicast2}}}}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x39, 0x9, 0x0, 0x25dfdbfc, {0x1}, [@typed={0x4}]}, 0x18}}, 0x0) pread64(r4, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 4.131054029s ago: executing program 4 (id=1340): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000010840)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000810000000000000010000000a0000005adb45662400000000000000000000000700000044140d"], 0x40}}], 0x1, 0x40080) 4.050645056s ago: executing program 4 (id=1341): r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40100330}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0xe631, 0xe, 0x0, 0x0) 3.916230164s ago: executing program 4 (id=1342): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf251a00000006002100610000002000228004"], 0x3c}, 0x1, 0x0, 0x0, 0x4850}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000020000000000edff020000009500000000000000a8dfef9f95b1ba41351e87c789ba1506fede05feea4de7f16ecd3362c6df5f2503c0b4f16344ad3ed21d97f6771f447c0a6e68abdaeea3ab60b8a760224043308d947442549d43c577bca7127541bfbef330f6551dc151730ab8256d15775a53b416a5c80aa8111b4ae9af5d37054273804bf84a6647d866b393d45a05f2cd1c7712e58fed6f33c333eed66f7b7c8c42cb49ea5b4ee8987c0fb74f"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="c0b954fed387dbe9ab7fc89b875b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000940)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r7, &(0x7f0000000500)="6f4beee39ecc856e77ba80e2b50863fd59bed8ee0e593626baf8"}, 0x20) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x89) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x4048811}, 0x880) 3.308541182s ago: executing program 0 (id=1303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0xfffffff5}, 0x0) 3.23703991s ago: executing program 4 (id=1346): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x0, 0x5, 0x0, 0x0, {{0x12}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x10000, 0x2, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r5, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7040fcdbdf251b00000008009a0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x138, r4, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "112789c977a60cb3480371c61b"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x11, 0x4, "7230cf792dbff2705e8ddc704e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "6c93d9a4fe6c9ca3710ad2d017"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x70, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "eb498975c5a11d6b009d73bd0c"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bfefe1950d57ed4d1db61fc6aa"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x20008015) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8000001}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x10001) 3.192049443s ago: executing program 0 (id=1347): syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close(0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x8, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 3.009772712s ago: executing program 0 (id=1348): r0 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x13, 0x0, r0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54fd2) ioctl$FICLONE(r3, 0x40049409, r3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0xcc60, r0, 0x0, {0xc, 0x6}, 0xb6}, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000a80)="cf435f01000880000000008586dd", 0x36, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) io_uring_enter(r0, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c80000000002f907801880b00089078000000000000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="15f0b94eac769b39279b13f7bc0ce386140a977c4294355a770422d9c4a917b9eee831485e94dde3cf0923b58daf7a0900000072eb535267b6a1e36936a8f51e98cb1a534d34e97badab81ef5d0f21d5f39720e5e9aada618a42116840e55946cd1ed45059cd2c7a62518a"], 0x20}}, 0x8000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x1f, 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 2.87358712s ago: executing program 0 (id=1349): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000140)=""/172, 0xac}, {0x0}], 0x2, 0x6, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r2, 0x1}, 0x10) 2.134546836s ago: executing program 0 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x4f6) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x4, 0x2, 0x75c5}}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40100330}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x847ba, 0xe631, 0xe, 0x0, 0x0) 1.961474307s ago: executing program 2 (id=1353): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25ff0100000000000000000000000000010000000000000000000000000000000100000080000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b'], 0x68}}, 0x4004040) r2 = socket(0x2b, 0x7, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600156f000000000000", @ANYRES32=0x0, @ANYBLOB="14"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a030000000000000000000002"], 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f0000000240)}, 0x20) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) 1.960829597s ago: executing program 2 (id=1354): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp6\x00') r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001680)="a905000000017464000100000000000000e5c064", 0x14}, {0x0}], 0x2}}], 0x1, 0x24040000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000580)={r5, 0xfffffff3}, &(0x7f00000005c0)=0x8) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000400)={{r0}, "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"}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000000)=""/104, 0x68}, {0x0}], 0x3, 0x5b, 0x3) 1.470520086s ago: executing program 1 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000840)="e70a992065fd55e733604df62c8bd3b9a9fe02d54223261728b310811b28648e15a18e347864ad76d2be2781e4ca1ba93485a77b4840cad4b154f5282666ae11ce05688ae4650f8250531777f90b4c170275028ff7ba228697103f6ae1dcb138d2cc2a47266d129af7b1043b373f8b1963c0538a6c408504ab2e57dc751cdbcd31e73361a1d637e9e5bf4959a3a71903af798f359c931995f811c1ff7ec4d6a0d0e6cc1fcdf8f7bcbaf3788cb8f891e910007e480341f1911db9b6f5d9947e165a2ec0f2bc2cd0bdf95449e3bc4bdff2ec793f3894e8d7d8d019db3b59a61672294139ef4e13", 0xe6, 0xfffffffffffffffe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25020202000900030073010032000000000900010073797a31"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040845}, 0x40008000) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0xb2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0xfffffd54) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020660b, &(0x7f0000000240)={0x402a, 0x10100002000001, 0x0, 0x7}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r7, 0x4) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000200)={0x0, 0xfffffefc, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996eee7d479db86fe609ea2029b", 0x7f, 0x2}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000a12040005800c000480060001008a9500000900010073797a30"], 0x110}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800050002"], 0x40}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 1.462818434s ago: executing program 2 (id=1356): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ptrace(0x10, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x49}, 0x103005, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.345602565s ago: executing program 2 (id=1357): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x485d8, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x6, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.162584074s ago: executing program 9 (id=1358): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x33, &(0x7f0000006680)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x2, &(0x7f0000000100)={0x0, 0x27, 0x4, @thr={&(0x7f0000000040)="0c8ab28e6eca9aefb6b1139cb10efe90e8aec7cc44de0d0fe95cbb906f013a88a1f69dd729dbfbc253a38fcb6c8c2b49364e1ede553c7b139ed403266493199ecdc6f5c5adbdb5a4724e8ef88313b989889b43c8e9d5ce535f1b802fc891121e79318f142cda47daf042eaef7a43661284cd4e5ce9b0f9d364451f5851a95ea18155243f7743cafa8c3c289dc332ff", &(0x7f0000000340)="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"}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000300)) syz_open_dev$MSR(&(0x7f0000000000), 0xb, 0x0) 1.109096165s ago: executing program 2 (id=1359): mlock2(&(0x7f00006b9000/0x2000)=nil, 0x2000, 0x6b9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee4, 0x12, 0xffffffffffffffff, 0xb2ca000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0xfffd, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/221) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mlock2(&(0x7f00006b9000/0x2000)=nil, 0x2000, 0x6b9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee4, 0x12, 0xffffffffffffffff, 0xb2ca000) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80000) (async) socket$kcm(0x2, 0x1000000000000005, 0x0) (async) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0xfffd, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) (async) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/221) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) (async) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async) 721.66115ms ago: executing program 9 (id=1360): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r2], 0x48}, 0x1, 0x2000000, 0x0, 0x48800}, 0x0) 693.797436ms ago: executing program 2 (id=1361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000001c0)={'team_slave_1\x00', @ifru_settings={0xde7, 0x5, @fr_pvc_info=0x0}}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0xffff, 0x0, 0x3d42, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40) 691.278735ms ago: executing program 9 (id=1362): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000001c0)=@sg0, r0, &(0x7f0000000200)='./file0\x00') r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x30000, 0x1000, 0x2, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="03000000040000000300"/28], 0x50) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r7, 0x402, 0x29) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r8, &(0x7f0000000dc0)=""/4106, 0x100a) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc, 0x9}, {}, {0x1}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {0x40000}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x14}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c8}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x543d}, {0x0, 0x0, 0x0, 0x20008}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0xb6d9e26613a92f7e}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 583.644867ms ago: executing program 9 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0xfffffff5, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 477.652349ms ago: executing program 9 (id=1364): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x20000000) 306.527111ms ago: executing program 9 (id=1365): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@dioread_nolock}, {@quota}]}, 0x1, 0x434, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0x80000001, 0xe8, 0x11}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r2, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 150.298385ms ago: executing program 0 (id=1366): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff070000", 0x5e3f, 0xffffffffffffffff) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}, {0x0, 0x200000001000, 0x4}], 0x2, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) 1.62481ms ago: executing program 4 (id=1367): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x4e20, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x3, {{0x2, 0x4e23, @multicast1}}}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x3, 0x3, 0x0, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000000)={0xa, 0x4e23, 0xcc08, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001340)={&(0x7f0000000340)=""/4096, 0x1000, 0x5, 0x10000}) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) listen(r0, 0x7e5a) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="02070900040000002dbd7000ffdbdf2502000b"], 0x20}}, 0x4040014) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x4) 0s ago: executing program 1 (id=1368): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200042, 0x15) ftruncate(r0, 0x100) syz_open_dev$tty20(0xc, 0x4, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$inet_smc(0x2b, 0x1, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x290, 0x230, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x170, 0x12, {0x959f1400}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x28000, 0x10, 0x3, {0x2df7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0x0, 0xff000000, 0xffffff00], 0x6, 0xc, 0x3, 0x4e24, 0x2, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) io_uring_enter(0xffffffffffffffff, 0x56d7, 0xf70d, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000280), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0xf) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x4}, 0x10) write(r5, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000880)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x40003f02) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) fsetxattr$security_ima(r3, &(0x7f0000000340), &(0x7f0000000380)=@sha1={0x1, "4daddfbcb7469a4acbd40a4688d105fa0290db0d"}, 0x15, 0x1) syz_emit_ethernet(0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaabb88a8200081001e0086dd61dace98003406fffe8000000000000000000000000000aafe809a00000000000000000000000000aa3a000000000000000000000200000000000000000000000000004e2300004e220000000200000000000000030000000300000002"], &(0x7f00000000c0)={0xfffffffe, 0x3, [0xee3, 0x87, 0x4ea, 0x240]}) kernel console output (not intermixed with test programs): .738496][ T6901] RBP: 00007fb07f89e090 R08: 0000000000000000 R09: 0000000000000000 [ 121.738511][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.738603][ T6901] R13: 00007fb0810e6128 R14: 00007fb0810e6090 R15: 00007ffcf08aec88 [ 121.738628][ T6901] [ 121.739360][ T6893] FAT-fs (loop4): Directory bread(block 199918) failed [ 121.849324][ T6610] veth0_vlan: entered promiscuous mode [ 121.880235][ T6893] FAT-fs (loop4): Directory bread(block 199919) failed [ 121.947100][ T6610] veth1_vlan: entered promiscuous mode [ 121.993442][ T6610] veth0_macvtap: entered promiscuous mode [ 122.009058][ T6893] FAT-fs (loop4): Directory bread(block 199920) failed [ 122.026319][ T6610] veth1_macvtap: entered promiscuous mode [ 122.033205][ T6893] FAT-fs (loop4): Directory bread(block 199921) failed [ 122.053025][ T6910] xt_hashlimit: size too large, truncated to 1048576 [ 122.072543][ T6893] FAT-fs (loop4): Directory bread(block 199922) failed [ 122.087316][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.097349][ T6893] FAT-fs (loop4): Directory bread(block 199923) failed [ 122.122162][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.139218][ T6885] syz.4.877: attempt to access beyond end of device [ 122.139218][ T6885] loop4: rw=8390659, sector=799760, nr_sectors = 16128 limit=512 [ 122.162405][ T67] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.176989][ T67] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.207183][ T6924] loop7: detected capacity change from 0 to 128 [ 122.231685][ T67] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.262511][ T6924] syz.7.884: attempt to access beyond end of device [ 122.262511][ T6924] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 122.277701][ T67] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.297326][ T6924] syz.7.884: attempt to access beyond end of device [ 122.297326][ T6924] loop7: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 122.325985][ T6929] loop4: detected capacity change from 0 to 128 [ 122.372972][ T6924] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 122.401419][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.884'. [ 122.416808][ T6924] syz.7.884: attempt to access beyond end of device [ 122.416808][ T6924] loop7: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 122.460971][ T6924] Buffer I/O error on dev loop7, logical block 77, lost async page write [ 122.501830][ T6924] syz.7.884: attempt to access beyond end of device [ 122.501830][ T6924] loop7: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 122.537737][ T6924] Buffer I/O error on dev loop7, logical block 78, lost async page write [ 122.584707][ T6924] syz.7.884: attempt to access beyond end of device [ 122.584707][ T6924] loop7: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 122.605949][ T6924] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 122.614918][ T6924] syz.7.884: attempt to access beyond end of device [ 122.614918][ T6924] loop7: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 122.629013][ T6924] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 122.650031][ T6924] syz.7.884: attempt to access beyond end of device [ 122.650031][ T6924] loop7: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 122.686787][ T84] kworker/u8:6: attempt to access beyond end of device [ 122.686787][ T84] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 122.841472][ T6956] loop8: detected capacity change from 0 to 512 [ 122.876188][ T6956] loop8: detected capacity change from 0 to 512 [ 122.975837][ T6962] loop8: detected capacity change from 0 to 1024 [ 123.014539][ T6962] EXT4-fs: Ignoring removed oldalloc option [ 123.045885][ T6962] EXT4-fs: Ignoring removed bh option [ 123.059256][ T6969] netlink: 'syz.7.890': attribute type 27 has an invalid length. [ 123.083706][ T6962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.203768][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.246243][ T6970] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.293707][ T6970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.459566][ T3424] IPVS: starting estimator thread 0... [ 123.466244][ T6985] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.473315][ T6985] tipc: Enabled bearer , priority 10 [ 123.490771][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 123.490790][ T28] audit: type=1400 audit(1772087462.302:909): avc: denied { setopt } for pid=6986 comm="syz.7.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.505316][ T6988] netlink: 68 bytes leftover after parsing attributes in process `syz.7.895'. [ 123.592299][ T28] audit: type=1400 audit(1772087462.312:910): avc: denied { write } for pid=6986 comm="syz.7.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.600317][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.620739][ T6990] IPVS: using max 2208 ests per chain, 110400 per kthread [ 123.695635][ T7004] ipvlan1: entered promiscuous mode [ 123.709228][ T7004] ipvlan1: entered allmulticast mode [ 123.716402][ T6962] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.888: Allocating blocks 1-17 which overlap fs metadata [ 123.720512][ T7004] veth0_vlan: entered allmulticast mode [ 123.739988][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.750534][ T7006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.898'. [ 123.771254][ T28] audit: type=1400 audit(1772087462.582:911): avc: denied { getopt } for pid=7005 comm="syz.7.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.876868][ T6929] syz.4.885 (6929) used greatest stack depth: 6816 bytes left [ 123.884580][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 123.911094][ T6212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.019991][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.160096][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.300022][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.440026][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.579963][ T3424] tipc: Node number set to 2666639207 [ 124.663863][ T28] audit: type=1400 audit(1772087463.472:912): avc: denied { create } for pid=7039 comm="syz.1.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 124.720013][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 124.907054][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.9.913'. [ 125.061902][ T7074] bridge_slave_0: left allmulticast mode [ 125.081051][ T7079] netlink: 'syz.9.916': attribute type 39 has an invalid length. [ 125.089835][ T7074] bridge_slave_0: left promiscuous mode [ 125.107623][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.124371][ T7074] bridge_slave_1: left allmulticast mode [ 125.141345][ T7074] bridge_slave_1: left promiscuous mode [ 125.147161][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.161864][ T7074] bond0: (slave bond_slave_0): Releasing backup interface [ 125.190843][ T7074] bond0: (slave bond_slave_1): Releasing backup interface [ 125.207317][ T7074] team0: Port device team_slave_0 removed [ 125.224001][ T7074] team0: Port device team_slave_1 removed [ 125.238856][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.256583][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.268174][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.276224][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.295002][ T7079] hsr_slave_1 (unregistering): left promiscuous mode [ 125.325723][ T7092] loop8: detected capacity change from 0 to 8192 [ 125.419140][ T7100] loop9: detected capacity change from 0 to 1024 [ 125.473048][ T7100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.519232][ T28] audit: type=1400 audit(1772087464.322:913): avc: denied { map } for pid=7099 comm="syz.9.923" path="/7/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.526972][ T7100] netlink: 'syz.9.923': attribute type 9 has an invalid length. [ 125.543265][ T28] audit: type=1400 audit(1772087464.322:914): avc: denied { execute } for pid=7099 comm="syz.9.923" path="/7/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.643164][ T7106] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.691336][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.704557][ T7110] loop7: detected capacity change from 0 to 512 [ 125.726424][ T7110] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.925: bg 0: block 104: invalid block bitmap [ 125.740071][ T7113] netlink: 'syz.9.926': attribute type 9 has an invalid length. [ 125.753674][ T7110] loop7: lost filesystem error report for type 5 error -117 [ 125.753875][ T7110] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 125.761442][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 125.761459][ C0] EXT4-fs (loop7): initial error at time 1772087464: ext4_validate_block_bitmap:432 [ 125.761487][ C0] EXT4-fs (loop7): last error at time 1772087464: ext4_validate_block_bitmap:432 [ 125.795611][ T7110] loop7: lost filesystem error report for type 5 error -117 [ 125.796963][ T7110] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.925: invalid indirect mapped block 1 (level 1) [ 125.817603][ T7110] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.817925][ T7110] EXT4-fs (loop7): 1 truncate cleaned up [ 125.834973][ T7110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.897264][ T6042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.921406][ T28] audit: type=1400 audit(1772087464.732:915): avc: denied { watch_reads } for pid=7114 comm="syz.9.928" path="/9" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 125.958262][ T7117] FAULT_INJECTION: forcing a failure. [ 125.958262][ T7117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.975616][ T7117] CPU: 0 UID: 0 PID: 7117 Comm: syz.7.927 Tainted: G W syzkaller #0 PREEMPT(full) [ 125.975663][ T7117] Tainted: [W]=WARN [ 125.975672][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.975689][ T7117] Call Trace: [ 125.975699][ T7117] [ 125.975709][ T7117] __dump_stack+0x1d/0x30 [ 125.975772][ T7117] dump_stack_lvl+0x95/0xd0 [ 125.975796][ T7117] dump_stack+0x15/0x1b [ 125.975819][ T7117] should_fail_ex+0x263/0x280 [ 125.975845][ T7117] should_fail+0xb/0x20 [ 125.975865][ T7117] should_fail_usercopy+0x1a/0x20 [ 125.975927][ T7117] _copy_from_user+0x1c/0xb0 [ 125.975963][ T7117] ___sys_sendmsg+0xc1/0x1e0 [ 125.976053][ T7117] __x64_sys_sendmsg+0xd4/0x160 [ 125.976093][ T7117] x64_sys_call+0x194c/0x3020 [ 125.976125][ T7117] do_syscall_64+0x12c/0x370 [ 125.976174][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.976276][ T7117] RIP: 0033:0x7fb080e6c629 [ 125.976294][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.976316][ T7117] RSP: 002b:00007fb07f8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.976458][ T7117] RAX: ffffffffffffffda RBX: 00007fb0810e5fa0 RCX: 00007fb080e6c629 [ 125.976486][ T7117] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 125.976500][ T7117] RBP: 00007fb07f8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 125.976520][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.976535][ T7117] R13: 00007fb0810e6038 R14: 00007fb0810e5fa0 R15: 00007ffcf08aec88 [ 125.976613][ T7117] [ 126.793958][ T7129] loop7: detected capacity change from 0 to 1024 [ 126.814613][ T7129] EXT4-fs: Ignoring removed oldalloc option [ 126.822737][ T7129] EXT4-fs: Ignoring removed bh option [ 126.845894][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.931'. [ 126.877851][ T7129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.928865][ T7137] loop8: detected capacity change from 0 to 1024 [ 126.939466][ T7137] EXT4-fs: Ignoring removed oldalloc option [ 126.945973][ T7137] EXT4-fs: Ignoring removed bh option [ 126.982929][ T7140] loop1: detected capacity change from 0 to 128 [ 126.991935][ T7137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.120779][ T7150] usb usb7: usbfs: process 7150 (syz.9.937) did not claim interface 0 before use [ 127.134043][ T12] kworker/u8:0: attempt to access beyond end of device [ 127.134043][ T12] loop1: rw=1, sector=145, nr_sectors = 576 limit=128 [ 127.232101][ T34] kworker/u8:2: attempt to access beyond end of device [ 127.232101][ T34] loop1: rw=1, sector=721, nr_sectors = 320 limit=128 [ 127.329126][ T7129] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.930: Allocating blocks 1-17 which overlap fs metadata [ 127.433093][ T7137] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.932: Allocating blocks 1-17 which overlap fs metadata [ 127.471369][ T6042] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.586825][ T28] audit: type=1400 audit(1772087466.392:916): avc: denied { read } for pid=7157 comm="syz.9.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.666480][ T6212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.726108][ T28] audit: type=1326 audit(1772087466.532:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.8.943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x0 [ 127.845890][ T7177] loop8: detected capacity change from 0 to 512 [ 127.880488][ T7177] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 127.913113][ T7177] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.943: corrupted xattr entries [ 127.926307][ T7177] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.926580][ T7177] EXT4-fs (loop8): 1 orphan inode deleted [ 127.935772][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 127.935798][ C1] EXT4-fs (loop8): initial error at time 1772087466: xattr_find_entry:337: inode 15 [ 127.935833][ C1] EXT4-fs (loop8): last error at time 1772087466: xattr_find_entry:337: inode 15 [ 127.976117][ T7140] syz.1.934 (7140) used greatest stack depth: 5880 bytes left [ 127.984959][ T7177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.062943][ T7177] bond1: option tlb_dynamic_lb: invalid value (2) [ 128.088692][ T7177] bond1 (unregistering): Released all slaves [ 128.090059][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.946'. [ 128.190089][ T7177] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 128.190089][ T7177] The task syz.8.943 (7177) triggered the difference, watch for misbehavior. [ 128.312674][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'. [ 128.325380][ T7195] gtp0: entered promiscuous mode [ 128.330736][ T7195] gtp0: entered allmulticast mode [ 128.644740][ T6212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.660022][ C1] net_ratelimit: 5 callbacks suppressed [ 128.660039][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 128.774323][ T7224] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.784398][ T7221] loop7: detected capacity change from 0 to 4096 [ 128.800255][ T7221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.851318][ T7224] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.894695][ T6042] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 128.912718][ T6042] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 128.915494][ T7225] loop1: detected capacity change from 0 to 8192 [ 128.932430][ T7225] msdos: Unknown parameter '2' [ 128.973992][ T7224] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.000853][ T7228] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.054038][ T7224] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.118316][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.142299][ T84] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.150865][ T84] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.159324][ T84] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.215223][ T7236] lo speed is unknown, defaulting to 1000 [ 129.294518][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 129.365458][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.381235][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.392397][ T7236] bridge_slave_0: entered allmulticast mode [ 129.401575][ T7236] bridge_slave_0: entered promiscuous mode [ 129.412269][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.419654][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.429340][ T7236] bridge_slave_1: entered allmulticast mode [ 129.437236][ T7236] bridge_slave_1: entered promiscuous mode [ 129.458560][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.470160][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.492174][ T7236] team0: Port device team_slave_0 added [ 129.499580][ T7236] team0: Port device team_slave_1 added [ 129.527855][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.548072][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.578907][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.591473][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.593231][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 129.598626][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.598668][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.681045][ T7236] hsr_slave_0: entered promiscuous mode [ 129.687517][ T7236] hsr_slave_1: entered promiscuous mode [ 129.694770][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.8.972'. [ 129.700168][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 129.708593][ T7236] debugfs: 'hsr0' already exists in 'hsr' [ 129.716935][ T7236] Cannot create hsr debugfs directory [ 129.724131][ T28] audit: type=1326 audit(1772087468.532:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz.8.972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fc817c629 code=0x0 [ 129.755566][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.792503][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.986903][ T7276] loop1: detected capacity change from 0 to 128 [ 130.201030][ T7236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.216012][ T7236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.244710][ T7236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.267626][ T7236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.287698][ T7288] bond_slave_0: entered promiscuous mode [ 130.293476][ T7288] bond_slave_1: entered promiscuous mode [ 130.299262][ T7288] bridge0: entered promiscuous mode [ 130.308813][ T7288] macvtap1: entered promiscuous mode [ 130.314631][ T7288] bond0: entered promiscuous mode [ 130.321138][ T7288] macvtap1: entered allmulticast mode [ 130.326732][ T7288] bond0: entered allmulticast mode [ 130.335032][ T7288] bond_slave_0: entered allmulticast mode [ 130.341675][ T7288] bond_slave_1: entered allmulticast mode [ 130.348008][ T7288] bridge0: entered allmulticast mode [ 130.355801][ T7288] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 130.367905][ T7288] bond0: left allmulticast mode [ 130.373279][ T7288] bond_slave_0: left allmulticast mode [ 130.379016][ T7288] bond_slave_1: left allmulticast mode [ 130.385259][ T7288] bridge0: left allmulticast mode [ 130.390607][ T7288] bond0: left promiscuous mode [ 130.396560][ T7288] bond_slave_0: left promiscuous mode [ 130.402055][ T7288] bond_slave_1: left promiscuous mode [ 130.407464][ T7288] bridge0: left promiscuous mode [ 130.589578][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.612272][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.625682][ T7303] loop4: detected capacity change from 0 to 128 [ 130.643364][ T7303] FAULT_INJECTION: forcing a failure. [ 130.643364][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 130.656342][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.4.976 Tainted: G W syzkaller #0 PREEMPT(full) [ 130.656384][ T7303] Tainted: [W]=WARN [ 130.656394][ T7303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.656446][ T7303] Call Trace: [ 130.656456][ T7303] [ 130.656524][ T7303] __dump_stack+0x1d/0x30 [ 130.656561][ T7303] dump_stack_lvl+0x95/0xd0 [ 130.656639][ T7303] dump_stack+0x15/0x1b [ 130.656669][ T7303] should_fail_ex+0x263/0x280 [ 130.656698][ T7303] ? __pfx_fat_alloc_inode+0x10/0x10 [ 130.656801][ T7303] should_failslab+0x8c/0xb0 [ 130.656827][ T7303] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 130.656856][ T7303] ? fat_alloc_inode+0x38/0xc0 [ 130.656951][ T7303] ? __pfx_fat_alloc_inode+0x10/0x10 [ 130.656994][ T7303] fat_alloc_inode+0x38/0xc0 [ 130.657027][ T7303] ? __pfx_fat_alloc_inode+0x10/0x10 [ 130.657060][ T7303] alloc_inode+0x40/0x170 [ 130.657095][ T7303] new_inode+0x1d/0xe0 [ 130.657155][ T7303] fat_build_inode+0x169/0x290 [ 130.657254][ T7303] vfat_lookup+0x166/0x2e0 [ 130.657297][ T7303] __lookup_slow+0x19d/0x260 [ 130.657334][ T7303] lookup_slow+0x3c/0x60 [ 130.657461][ T7303] path_lookupat+0x2f7/0x500 [ 130.657496][ T7303] filename_lookup+0x190/0x390 [ 130.657541][ T7303] user_path_at+0x3e/0x100 [ 130.657579][ T7303] __se_sys_mount+0x25b/0x2e0 [ 130.657606][ T7303] ? fput+0x8f/0xc0 [ 130.657707][ T7303] __x64_sys_mount+0x67/0x80 [ 130.657735][ T7303] x64_sys_call+0x2d61/0x3020 [ 130.657815][ T7303] do_syscall_64+0x12c/0x370 [ 130.657862][ T7303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.657889][ T7303] RIP: 0033:0x7fd649d4c629 [ 130.657927][ T7303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.657975][ T7303] RSP: 002b:00007fd64879f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.658082][ T7303] RAX: ffffffffffffffda RBX: 00007fd649fc5fa0 RCX: 00007fd649d4c629 [ 130.658097][ T7303] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 130.658110][ T7303] RBP: 00007fd64879f090 R08: 0000200000001000 R09: 0000000000000000 [ 130.658125][ T7303] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 130.658144][ T7303] R13: 00007fd649fc6038 R14: 00007fd649fc5fa0 R15: 00007ffe33e64768 [ 130.658169][ T7303] [ 130.740208][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 130.903568][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.911088][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.938160][ T7309] loop8: detected capacity change from 0 to 512 [ 130.952184][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.959352][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.006115][ T28] audit: type=1400 audit(1772087469.812:919): avc: denied { map } for pid=7308 comm="syz.8.980" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.144541][ T7331] loop4: detected capacity change from 0 to 1024 [ 131.184159][ T7331] EXT4-fs: Ignoring removed oldalloc option [ 131.205584][ T7331] EXT4-fs: Ignoring removed bh option [ 131.237958][ T7331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.254750][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.342612][ T7348] netlink: 'syz.9.983': attribute type 10 has an invalid length. [ 131.350931][ T7348] netlink: 40 bytes leftover after parsing attributes in process `syz.9.983'. [ 131.360833][ T7348] bridge0: port 1(dummy0) entered blocking state [ 131.367489][ T7348] bridge0: port 1(dummy0) entered disabled state [ 131.374196][ T7348] dummy0: entered allmulticast mode [ 131.380896][ T7348] dummy0: entered promiscuous mode [ 131.386545][ T7348] bridge0: port 1(dummy0) entered blocking state [ 131.393049][ T7348] bridge0: port 1(dummy0) entered forwarding state [ 131.596381][ T7236] veth0_vlan: entered promiscuous mode [ 131.636680][ T7331] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.982: Allocating blocks 1-17 which overlap fs metadata [ 131.677557][ T7236] veth1_vlan: entered promiscuous mode [ 131.699331][ T7375] hub 8-0:1.0: USB hub found [ 131.704634][ T7375] hub 8-0:1.0: 8 ports detected [ 131.717958][ T7375] netlink: 'syz.8.985': attribute type 10 has an invalid length. [ 131.771200][ T7375] macvlan1: entered allmulticast mode [ 131.780073][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 131.788522][ T7375] veth1_vlan: entered allmulticast mode [ 131.801609][ T7375] team0: Port device macvlan1 added [ 131.883606][ T7236] veth0_macvtap: entered promiscuous mode [ 131.956438][ T7236] veth1_macvtap: entered promiscuous mode [ 132.064168][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.146935][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.246039][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.276905][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.314872][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.329116][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.340925][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.430900][ T7391] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 132.461322][ T7391] bond1 (unregistering): Released all slaves [ 132.567973][ T7411] netlink: 'syz.9.993': attribute type 10 has an invalid length. [ 132.697387][ T7418] lo speed is unknown, defaulting to 1000 [ 132.820006][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 132.863165][ T7437] set_capacity_and_notify: 1 callbacks suppressed [ 132.863188][ T7437] loop8: detected capacity change from 0 to 512 [ 132.910771][ T28] audit: type=1326 audit(1772087471.722:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 132.969535][ T28] audit: type=1326 audit(1772087471.752:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 133.031511][ T28] audit: type=1326 audit(1772087471.752:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 133.067014][ T28] audit: type=1326 audit(1772087471.752:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 133.094324][ T28] audit: type=1326 audit(1772087471.752:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 133.123323][ T28] audit: type=1326 audit(1772087471.752:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 133.203516][ T28] audit: type=1326 audit(1772087471.752:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 133.310455][ T28] audit: type=1326 audit(1772087471.752:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 133.414689][ T84] bridge_slave_1: left allmulticast mode [ 133.438805][ T84] bridge_slave_1: left promiscuous mode [ 133.466623][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.494251][ T84] bridge_slave_0: left allmulticast mode [ 133.540991][ T84] bridge_slave_0: left promiscuous mode [ 133.546905][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.664921][ T7464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 133.685988][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.715810][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.742481][ T7465] loop8: detected capacity change from 0 to 128 [ 133.750669][ T84] bond0 (unregistering): Released all slaves [ 133.813102][ T7465] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.860643][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 133.878269][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1003'. [ 133.887737][ T7465] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 133.915896][ T84] hsr_slave_0: left promiscuous mode [ 133.946808][ T84] hsr_slave_1: left promiscuous mode [ 133.970528][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.983323][ T7481] loop9: detected capacity change from 0 to 256 [ 133.987717][ T7479] loop2: detected capacity change from 0 to 512 [ 134.020118][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.044058][ T7479] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 134.066432][ T7479] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.077592][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.087563][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.129052][ T7479] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1006: Failed to acquire dquot type 1 [ 134.154021][ T7479] loop2: lost filesystem error report for type 5 error -117 [ 134.159952][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 134.174187][ C1] EXT4-fs (loop2): initial error at time 1772087472: ext4_acquire_dquot:7001 [ 134.183305][ C1] EXT4-fs (loop2): last error at time 1772087472: ext4_acquire_dquot:7001 [ 134.195924][ T7479] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1006: corrupted inode contents [ 134.210790][ T7479] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.211089][ T7479] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.1006: mark_inode_dirty error [ 134.233847][ T84] team0 (unregistering): Port device team_slave_1 removed [ 134.244590][ T84] team0 (unregistering): Port device team_slave_0 removed [ 134.300206][ T7479] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.300589][ T7479] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1006: corrupted inode contents [ 134.360023][ T7479] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.360681][ T7479] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1006: mark_inode_dirty error [ 134.389441][ T7466] netlink: 'syz.9.1003': attribute type 12 has an invalid length. [ 134.407347][ T7479] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.407895][ T7479] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1006: corrupted inode contents [ 134.500857][ T7479] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.501307][ T7479] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 134.504964][ T6212] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.526005][ T7479] loop2: lost filesystem error report for type 5 error -117 [ 134.530176][ T7479] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.1006: corrupted inode contents [ 134.552894][ T7479] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.673486][ T7479] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.1006: mark_inode_dirty error [ 134.694168][ T7479] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 134.699953][ T7479] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 134.777006][ T7506] loop4: detected capacity change from 0 to 128 [ 134.783746][ T7506] vfat: Unknown parameter '˙˙˙˙˙˙˙˙18446744073709551615' [ 134.900015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 135.134174][ T7479] loop2: lost filesystem error report for type 5 error -117 [ 135.134618][ T7479] EXT4-fs (loop2): 1 truncate cleaned up [ 135.152349][ T7479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 135.194929][ T7236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 135.218447][ T7531] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1007'. [ 135.292360][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1007'. [ 135.465436][ T7551] lo speed is unknown, defaulting to 1000 [ 135.481894][ T7551] lo speed is unknown, defaulting to 1000 [ 135.488160][ T7551] lo speed is unknown, defaulting to 1000 [ 135.540414][ T7557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7557 comm=syz.2.1011 [ 135.639147][ T7560] lo speed is unknown, defaulting to 1000 [ 135.855576][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 135.855594][ T28] audit: type=1400 audit(1772087474.662:937): avc: denied { ioctl } for pid=7561 comm="syz.4.1015" path="socket:[19980]" dev="sockfs" ino=19980 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.906638][ T7551] infiniband syU×: set active [ 135.911697][ T5605] lo speed is unknown, defaulting to 1000 [ 135.940092][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 135.945127][ T7551] infiniband syU×: added lo [ 135.972873][ T7551] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 135.973582][ T7551] infiniband syU×: Couldn't open port 1 [ 136.114824][ T7551] RDS/IB: syU×: added [ 136.134521][ T7551] smc: adding ib device syU× with port count 1 [ 136.165446][ T7551] smc: ib device syU× port 1 has no pnetid [ 136.173401][ T5605] lo speed is unknown, defaulting to 1000 [ 136.190924][ T7551] lo speed is unknown, defaulting to 1000 [ 136.400750][ T7551] lo speed is unknown, defaulting to 1000 [ 136.564590][ T7551] lo speed is unknown, defaulting to 1000 [ 136.645750][ T28] audit: type=1400 audit(1772087475.442:938): avc: denied { create } for pid=7598 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=qipcrtr_socket permissive=1 [ 136.727919][ T7551] lo speed is unknown, defaulting to 1000 [ 136.739893][ T28] audit: type=1400 audit(1772087475.482:939): avc: denied { create } for pid=7598 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 136.781778][ T28] audit: type=1400 audit(1772087475.482:940): avc: denied { bind } for pid=7598 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 136.814347][ T28] audit: type=1400 audit(1772087475.482:941): avc: denied { name_bind } for pid=7598 comm="syz.1.1022" src=20003 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 136.857361][ T28] audit: type=1400 audit(1772087475.482:942): avc: denied { node_bind } for pid=7598 comm="syz.1.1022" saddr=224.0.0.1 src=20003 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 136.904871][ T28] audit: type=1400 audit(1772087475.482:943): avc: denied { create } for pid=7598 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 136.953977][ T28] audit: type=1400 audit(1772087475.482:944): avc: denied { create } for pid=7598 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 136.979966][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 136.994153][ T7551] lo speed is unknown, defaulting to 1000 [ 137.016802][ T28] audit: type=1400 audit(1772087475.482:945): avc: denied { ioctl } for pid=7598 comm="syz.1.1022" path="socket:[20613]" dev="sockfs" ino=20613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 137.054082][ T7621] xt_hashlimit: size too large, truncated to 1048576 [ 137.089822][ T28] audit: type=1400 audit(1772087475.492:946): avc: denied { write } for pid=7598 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 137.193758][ T7634] loop1: detected capacity change from 0 to 256 [ 137.217676][ T7551] lo speed is unknown, defaulting to 1000 [ 137.362089][ T7551] lo speed is unknown, defaulting to 1000 [ 137.502274][ T7582] loop9: detected capacity change from 0 to 2048 [ 137.562540][ T7660] bond0: (slave bridge0): Releasing backup interface [ 137.584868][ T7668] 9pnet_fd: p9_fd_create_unix (7668): problem connecting socket: ./file0: -2 [ 137.600712][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.643520][ T7672] loop2: detected capacity change from 0 to 512 [ 137.668220][ T7660] bridge_slave_0: left allmulticast mode [ 137.691442][ T7660] bridge_slave_0: left promiscuous mode [ 137.698664][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.698713][ T7672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.737671][ T7680] loop8: detected capacity change from 0 to 128 [ 137.743784][ T7660] bridge_slave_1: left allmulticast mode [ 137.761401][ T7660] bridge_slave_1: left promiscuous mode [ 137.763791][ T7672] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.767890][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.789072][ T7660] bond0: (slave bond_slave_0): Releasing backup interface [ 137.835708][ T7660] bond0: (slave bond_slave_1): Releasing backup interface [ 137.856605][ T7660] team0: Port device team_slave_0 removed [ 137.864104][ T5588] IPVS: starting estimator thread 0... [ 137.891327][ T7660] team0: Port device team_slave_1 removed [ 137.906274][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.922693][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.934834][ T7660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.943289][ T7660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.953771][ T7660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 137.970311][ T7687] IPVS: using max 2208 ests per chain, 110400 per kthread [ 138.019993][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 138.051549][ T7698] netlink: 'syz.8.1041': attribute type 49 has an invalid length. [ 138.238890][ T7717] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1044'. [ 138.256435][ T7717] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1044'. [ 138.353129][ T7730] xt_hashlimit: size too large, truncated to 1048576 [ 138.375895][ T7737] loop9: detected capacity change from 0 to 512 [ 138.414296][ T7737] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 138.438939][ T7737] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 138.463389][ T7737] EXT4-fs (loop9): 1 truncate cleaned up [ 138.475898][ T7737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.602608][ T7236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.637584][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.710271][ T7767] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1052'. [ 138.909675][ T7773] loop1: detected capacity change from 0 to 512 [ 138.918747][ T7773] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.024860][ T7773] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1054: bg 0: block 393: padding at end of block bitmap is not set [ 139.039283][ T7773] loop1: lost filesystem error report for type 5 error -117 [ 139.039952][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 139.053973][ C0] EXT4-fs (loop1): initial error at time 1772087477: ext4_validate_block_bitmap:441 [ 139.060183][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 139.063476][ C0] EXT4-fs (loop1): last error at time 1772087477: ext4_validate_block_bitmap:441 [ 139.081538][ T7773] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 139.090508][ T7773] loop1: lost filesystem error report for type 5 error -117 [ 139.098940][ T7773] EXT4-fs (loop1): 2 truncates cleaned up [ 139.113583][ T7773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.447028][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 139.565065][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.579763][ T7792] cgroup: noprefix used incorrectly [ 139.623213][ T7803] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 139.638048][ T7803] SELinux: failed to load policy [ 139.693478][ T7810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.767634][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 139.834230][ T7816] lo speed is unknown, defaulting to 1000 [ 139.863923][ T7816] lo speed is unknown, defaulting to 1000 [ 139.977815][ T7827] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1068'. [ 140.005319][ T7828] loop1: detected capacity change from 0 to 1024 [ 140.018978][ T7827] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1068'. [ 140.031584][ T7828] EXT4-fs: Ignoring removed nobh option [ 140.058352][ T7828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.099973][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 140.113798][ T7828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.131945][ T7828] EXT4-fs (loop1): shut down requested (0) [ 140.198547][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.302288][ T7841] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.404265][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'. [ 140.592760][ T7870] netlink: 3260 bytes leftover after parsing attributes in process `syz.1.1078'. [ 140.623229][ T7864] lo speed is unknown, defaulting to 1000 [ 140.651015][ T7864] lo speed is unknown, defaulting to 1000 [ 140.863776][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 140.863792][ T28] audit: type=1400 audit(1772087479.672:959): avc: denied { create } for pid=7888 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.895928][ T7889] loop1: detected capacity change from 0 to 512 [ 140.904720][ T7889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.922463][ T7889] EXT4-fs (loop1): 1 truncate cleaned up [ 140.945564][ T7889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.046637][ T7900] loop2: detected capacity change from 0 to 512 [ 141.091504][ T7900] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 141.124360][ T7900] EXT4-fs (loop2): orphan cleanup on readonly fs [ 141.139962][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 141.151473][ T7900] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 141.207078][ T7900] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 141.217243][ T7900] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.1083: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 141.233365][ T7913] loop8: detected capacity change from 0 to 128 [ 141.272872][ T7913] EXT4-fs: Ignoring removed nobh option [ 141.278844][ T7900] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 141.279219][ T7900] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1083: couldn't read orphan inode 13 (err -117) [ 141.288428][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 141.288465][ C1] EXT4-fs (loop2): last error at time 1772087480: ext4_ext_check_inode:521: inode 13 [ 141.337356][ T7913] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.370394][ T7913] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.401388][ T7900] loop2: lost filesystem error report for type 5 error -117 [ 141.415809][ T7900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.478017][ T7900] EXT4-fs (loop2): shut down requested (0) [ 141.480480][ T28] audit: type=1400 audit(1772087480.282:960): avc: denied { ioctl } for pid=7898 comm="syz.2.1083" path="socket:[21632]" dev="sockfs" ino=21632 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.545729][ T7236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.551751][ T6212] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.612801][ T28] audit: type=1326 audit(1772087480.412:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 141.637999][ T7929] loop8: detected capacity change from 0 to 256 [ 141.712221][ T7929] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.719833][ T28] audit: type=1326 audit(1772087480.422:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 141.746397][ T28] audit: type=1326 audit(1772087480.422:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 141.772340][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.782201][ T28] audit: type=1326 audit(1772087480.422:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 141.801021][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 141.834531][ T84] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.854183][ T28] audit: type=1326 audit(1772087480.462:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 141.863571][ T84] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.912798][ T7939] FAT-fs (loop8): Filesystem has been set read-only [ 141.929706][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 141.938996][ T84] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.953427][ T28] audit: type=1326 audit(1772087480.462:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 141.970106][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 141.985922][ T84] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.998529][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 142.008071][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 142.040020][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 142.058738][ T28] audit: type=1326 audit(1772087480.462:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 142.087457][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 142.096418][ T28] audit: type=1326 audit(1772087480.462:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7926 comm="syz.2.1089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 142.114022][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 142.137248][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 142.178871][ T7939] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 142.181138][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 142.401340][ T7971] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 142.454589][ T7974] loop2: detected capacity change from 0 to 1024 [ 142.589179][ T7976] loop9: detected capacity change from 0 to 128 [ 142.600174][ T7976] msdos: Bad value for 'gid' [ 142.604817][ T7976] msdos: Bad value for 'gid' [ 142.749109][ T7974] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 142.929191][ T7974] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.1101: lblock 2 mapped to illegal pblock 2 (length 1) [ 142.991842][ T7974] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 142.994994][ T7974] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.1101: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.006239][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 143.006270][ C1] EXT4-fs (loop2): initial error at time 1772087481: ext4_map_blocks:776: inode 3: block 2 [ 143.006316][ C1] EXT4-fs (loop2): last error at time 1772087481: ext4_map_blocks:776: inode 3: block 2 [ 143.047176][ T7974] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 143.061881][ T7974] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1101: Failed to acquire dquot type 0 [ 143.117873][ T7984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=7984 comm=syz.8.1103 [ 143.171023][ T7974] loop2: lost filesystem error report for type 5 error -117 [ 143.171346][ T7974] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 143.217081][ T7974] loop2: lost filesystem error report for type 5 error -117 [ 143.219980][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 143.236783][ T7974] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.1101: mark_inode_dirty error [ 143.260310][ T7974] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.263261][ T7974] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 143.319719][ T7974] EXT4-fs (loop2): 1 orphan inode deleted [ 143.334289][ T7974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.340282][ T30] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 143.362825][ T30] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 143.362964][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 143.442096][ T7974] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.463451][ T8004] loop4: detected capacity change from 0 to 512 [ 143.475026][ T7974] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz.2.1101: Invalid inode table block 1 in block_group 0 [ 143.490350][ T8004] EXT4-fs: Ignoring removed bh option [ 143.495965][ T8004] EXT4-fs: inline encryption not supported [ 143.499133][ T7974] loop2: lost filesystem error report for type 5 error -117 [ 143.504421][ T7974] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 143.527325][ T8004] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.536680][ T8004] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) [ 143.545039][ T7974] loop2: lost filesystem error report for type 5 error -117 [ 143.545224][ T7974] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz.2.1101: mark_inode_dirty error [ 143.563910][ T7974] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 143.642831][ T8011] loop2: detected capacity change from 0 to 512 [ 143.672199][ T8011] EXT4-fs: Ignoring removed nobh option [ 143.693769][ T8011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.725827][ T8011] EXT4-fs (loop2): 1 truncate cleaned up [ 143.732000][ T8011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.777142][ T8016] loop1: detected capacity change from 0 to 512 [ 143.786676][ T8016] EXT4-fs: Ignoring removed i_version option [ 143.807447][ T8016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.820161][ T8016] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.843183][ T8016] EXT4-fs (loop1): orphan cleanup on readonly fs [ 143.851943][ T8016] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 80 vs 41 free clusters [ 143.904978][ T8016] EXT4-fs (loop1): Remounting filesystem read-only [ 143.911644][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 143.911665][ C1] EXT4-fs (loop1): initial error at time 1772087482: ext4_mb_generate_buddy:1315 [ 143.911695][ C1] EXT4-fs (loop1): last error at time 1772087482: ext4_mb_generate_buddy:1315 [ 143.936644][ T8016] EXT4-fs (loop1): 1 truncate cleaned up [ 143.958006][ T8024] tmpfs: Bad value for 'mpol' [ 143.966586][ T8016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.972559][ T8027] FAULT_INJECTION: forcing a failure. [ 143.972559][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.994764][ T8027] CPU: 1 UID: 0 PID: 8027 Comm: syz.4.1118 Tainted: G W syzkaller #0 PREEMPT(full) [ 143.994816][ T8027] Tainted: [W]=WARN [ 143.994825][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.994841][ T8027] Call Trace: [ 143.994884][ T8027] [ 143.994894][ T8027] __dump_stack+0x1d/0x30 [ 143.994953][ T8027] dump_stack_lvl+0x95/0xd0 [ 143.994985][ T8027] dump_stack+0x15/0x1b [ 143.995012][ T8027] should_fail_ex+0x263/0x280 [ 143.995042][ T8027] should_fail+0xb/0x20 [ 143.995143][ T8027] should_fail_usercopy+0x1a/0x20 [ 143.995177][ T8027] strncpy_from_user+0x27/0x250 [ 143.995214][ T8027] __x64_sys_lgetxattr+0xa5/0x150 [ 143.995279][ T8027] x64_sys_call+0x2ecc/0x3020 [ 143.995316][ T8027] do_syscall_64+0x12c/0x370 [ 143.995369][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.995435][ T8027] RIP: 0033:0x7fd649d4c629 [ 143.995452][ T8027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.995488][ T8027] RSP: 002b:00007fd64879f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 143.995575][ T8027] RAX: ffffffffffffffda RBX: 00007fd649fc5fa0 RCX: 00007fd649d4c629 [ 143.995591][ T8027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.995603][ T8027] RBP: 00007fd64879f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.995616][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.995628][ T8027] R13: 00007fd649fc6038 R14: 00007fd649fc5fa0 R15: 00007ffe33e64768 [ 143.995647][ T8027] [ 144.195288][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.251511][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1121'. [ 144.260582][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 144.280768][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1121'. [ 144.291571][ T7236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.340818][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 144.381210][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1121'. [ 144.381526][ T8043] loop2: detected capacity change from 0 to 1024 [ 144.402516][ T8043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.425229][ T8040] SELinux: failed to load policy [ 144.433653][ T8043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.470002][ T7236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.491537][ T8058] loop9: detected capacity change from 0 to 512 [ 144.498558][ T8058] EXT4-fs: Ignoring removed oldalloc option [ 144.517440][ T8058] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 144.529511][ T8060] tmpfs: Bad value for 'mpol' [ 144.547226][ T8058] EXT4-fs (loop9): 1 truncate cleaned up [ 144.560513][ T8058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.577219][ T8064] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 144.601365][ T8068] loop2: detected capacity change from 0 to 256 [ 144.626462][ T8066] loop1: detected capacity change from 0 to 128 [ 144.640481][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.699187][ T8070] FAULT_INJECTION: forcing a failure. [ 144.699187][ T8070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.742397][ T8075] __nla_validate_parse: 1 callbacks suppressed [ 144.742417][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 144.751173][ T8066] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.764368][ T8070] CPU: 1 UID: 0 PID: 8070 Comm: syz.8.1133 Tainted: G W syzkaller #0 PREEMPT(full) [ 144.764475][ T8070] Tainted: [W]=WARN [ 144.764505][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.764548][ T8070] Call Trace: [ 144.764571][ T8070] [ 144.764602][ T8070] __dump_stack+0x1d/0x30 [ 144.764766][ T8070] dump_stack_lvl+0x95/0xd0 [ 144.764870][ T8070] dump_stack+0x15/0x1b [ 144.764946][ T8070] should_fail_ex+0x263/0x280 [ 144.765023][ T8070] should_fail_alloc_page+0xf2/0x100 [ 144.765086][ T8070] __alloc_frozen_pages_noprof+0x108/0x360 [ 144.765194][ T8070] alloc_pages_mpol+0xb3/0x260 [ 144.765343][ T8070] ? css_rstat_updated+0xbb/0x280 [ 144.765429][ T8070] vma_alloc_folio_noprof+0x1a9/0x300 [ 144.765600][ T8070] handle_mm_fault+0x111f/0x3020 [ 144.765777][ T8070] ? vma_start_read+0x1c7/0x2c0 [ 144.765877][ T8070] do_user_addr_fault+0x62f/0x1050 [ 144.765984][ T8070] ? ksys_mmap_pgoff+0xc1/0x310 [ 144.766128][ T8070] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 144.766223][ T8070] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 144.766306][ T8070] ? trace_page_fault_user+0x1f/0xe0 [ 144.766411][ T8070] exc_page_fault+0x62/0xa0 [ 144.766515][ T8070] asm_exc_page_fault+0x26/0x30 [ 144.766582][ T8070] RIP: 0033:0x7f7fc8033b18 [ 144.766726][ T8070] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 144.766790][ T8070] RSP: 002b:00007f7fc6bce470 EFLAGS: 00010286 [ 144.766856][ T8070] RAX: 0000000000001000 RBX: 00007f7fc6bce530 RCX: 0000000000000001 [ 144.766973][ T8070] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 00007f7fc6bce5d0 [ 144.767024][ T8070] RBP: 00000000000000db R08: 00007f7fbe7af000 R09: 00000000000000ff [ 144.767147][ T8070] R10: 0000000000000000 R11: 00007f7fc6bce540 R12: 0000000000000001 [ 144.767192][ T8070] R13: 00007f7fc8232200 R14: 0000000000000000 R15: 00007f7fc6bce5d0 [ 144.767256][ T8070] [ 144.767298][ T8070] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 144.795899][ T8072] loop9: detected capacity change from 0 to 512 [ 144.805766][ T8066] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.809467][ T8072] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 144.920351][ T8070] loop8: detected capacity change from 0 to 512 [ 145.025299][ T8070] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1133: inode has both inline data and extents flags [ 145.039830][ T8070] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.040323][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 145.056910][ C0] EXT4-fs (loop8): initial error at time 1772087483: ext4_orphan_get:1391: inode 15 [ 145.067385][ C0] EXT4-fs (loop8): last error at time 1772087483: ext4_orphan_get:1391: inode 15 [ 145.085870][ T8070] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1133: couldn't read orphan inode 15 (err -117) [ 145.098124][ T8070] loop8: lost filesystem error report for type 5 error -117 [ 145.099319][ T8070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.156124][ T6212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.234029][ T8088] tmpfs: Bad value for 'mpol' [ 145.301820][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 145.356804][ T8096] lo speed is unknown, defaulting to 1000 [ 145.383385][ T8096] lo speed is unknown, defaulting to 1000 [ 145.391813][ T8090] loop9: detected capacity change from 0 to 512 [ 145.490352][ T8090] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 145.539506][ T8090] EXT4-fs (loop9): 1 truncate cleaned up [ 145.574054][ T8090] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.590637][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.740419][ T8120] EXT4-fs: Ignoring removed bh option [ 145.762405][ T8120] EXT4-fs (loop8): 1 truncate cleaned up [ 145.810892][ T8120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.860139][ T8127] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 145.918483][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 145.918534][ T28] audit: type=1400 audit(1772087484.722:1102): avc: denied { rename } for pid=8118 comm="syz.8.1148" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.957255][ T8127] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 146.013305][ T8120] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1148: invalid indirect mapped block 4294967295 (level 1) [ 146.037107][ T8127] JBD2: no valid journal superblock found [ 146.045908][ T8120] EXT4-fs (loop8): Remounting filesystem read-only [ 146.050823][ T8127] EXT4-fs (loop2): Could not load journal inode [ 146.147309][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.159526][ T6212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.189217][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 146.311114][ T28] audit: type=1400 audit(1772087485.122:1103): avc: denied { ioctl } for pid=8148 comm="syz.9.1159" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.339981][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 146.438206][ T28] audit: type=1400 audit(1772087485.242:1104): avc: denied { bind } for pid=8152 comm="syz.8.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.483355][ T28] audit: type=1326 audit(1772087485.292:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.8.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 146.514489][ T28] audit: type=1326 audit(1772087485.292:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.8.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 146.544692][ T28] audit: type=1326 audit(1772087485.312:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.8.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 146.568901][ T28] audit: type=1326 audit(1772087485.312:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.8.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 146.573929][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1160'. [ 146.598373][ T28] audit: type=1326 audit(1772087485.312:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.8.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 146.626103][ T28] audit: type=1326 audit(1772087485.312:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.8.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fc817c629 code=0x7ffc0000 [ 146.630786][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1160'. [ 146.650329][ T28] audit: type=1326 audit(1772087485.352:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.9.1162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b1b8fc629 code=0x0 [ 146.688581][ T8159] ext4: Unknown parameter 'noacl' [ 146.855966][ T8164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.886652][ T8164] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 146.899609][ T8164] System zones: 0-1, 3-36 [ 146.900967][ T8167] netlink: 'syz.8.1165': attribute type 13 has an invalid length. [ 146.916784][ T8164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.150843][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.158136][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.303840][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.328501][ T8167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.379973][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 147.434482][ T8167] veth1_vlan: left allmulticast mode [ 147.463083][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1169'. [ 147.492446][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1169'. [ 147.547638][ T8164] netem: change failed [ 147.557823][ T5588] lo speed is unknown, defaulting to 1000 [ 147.565185][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1169'. [ 147.566219][ T5588] syU×: Port: 1 Link DOWN [ 147.599826][ T1022] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.641157][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.650254][ T1022] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.676788][ T8184] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8184 comm=syz.9.1169 [ 147.701229][ T1022] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.730084][ T1022] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.760335][ T8169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8169 comm=syz.2.1166 [ 147.774749][ T3411] lo speed is unknown, defaulting to 1000 [ 148.049942][ T3307] loop9: p1 < > p2 p3 p4 [ 148.062706][ T3307] loop9: partition table partially beyond EOD, truncated [ 148.091746][ T8216] netlink: 'syz.8.1176': attribute type 33 has an invalid length. [ 148.099725][ T8216] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1176'. [ 148.109372][ T3307] loop9: p1 start 4096 is beyond EOD, truncated [ 148.116951][ T3307] loop9: p2 start 4294508544 is beyond EOD, truncated [ 148.124506][ T8216] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1176'. [ 148.133815][ T3307] loop9: p3 size 134217728 extends beyond EOD, truncated [ 148.154378][ T8206] loop9: p1 < > p2 p3 p4 [ 148.167723][ T8206] loop9: partition table partially beyond EOD, truncated [ 148.183605][ T8206] loop9: p1 start 4096 is beyond EOD, truncated [ 148.197874][ T8206] loop9: p2 start 4294508544 is beyond EOD, truncated [ 148.222554][ T8206] loop9: p3 size 134217728 extends beyond EOD, truncated [ 148.419960][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 148.477329][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 148.478034][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 148.639866][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 148.653333][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 148.704104][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 148.704129][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 148.943296][ T8259] lo speed is unknown, defaulting to 1000 [ 148.957227][ T8259] lo speed is unknown, defaulting to 1000 [ 149.459964][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 149.847809][ T8272] set_capacity_and_notify: 6 callbacks suppressed [ 149.847830][ T8272] loop9: detected capacity change from 0 to 512 [ 149.886428][ T8272] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1186: invalid indirect mapped block 4294967295 (level 1) [ 149.909968][ T8272] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 149.913496][ T8275] xt_hashlimit: size too large, truncated to 1048576 [ 149.913526][ T8272] EXT4-fs (loop9): Remounting filesystem read-only [ 149.923156][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 149.923194][ C1] EXT4-fs (loop9): initial error at time 1772087488: ext4_free_branches:1023: inode 11 [ 149.923225][ C1] EXT4-fs (loop9): last error at time 1772087488: ext4_free_branches:1023: inode 11 [ 150.020726][ T8272] EXT4-fs (loop9): 2 truncates cleaned up [ 150.026870][ T8272] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.079801][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.128511][ T8212] loop1: detected capacity change from 0 to 1024 [ 150.173502][ T8212] EXT4-fs: Ignoring removed orlov option [ 150.228745][ T8212] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.1170: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 150.254918][ T8212] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 150.256616][ T8212] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.1170: Bad quota inode: 4, type: 1 [ 150.266435][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 150.267024][ C0] EXT4-fs (loop1): initial error at time 1772087489: ext4_ext_check_inode:521: inode 4 [ 150.267206][ C0] EXT4-fs (loop1): last error at time 1772087489: ext4_ext_check_inode:521: inode 4 [ 150.327969][ T8212] loop1: lost filesystem error report for type 5 error -117 [ 150.330199][ T8212] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.417091][ T8212] EXT4-fs (loop1): mount failed [ 150.437826][ T8285] loop9: detected capacity change from 0 to 8192 [ 150.485635][ T8291] xt_hashlimit: size too large, truncated to 1048576 [ 150.502517][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 150.521094][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1191'. [ 150.522015][ T8285] loop9: p1 < > p2 p4 < p5 > [ 150.570787][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 150.573349][ T8285] loop9: partition table partially beyond EOD, truncated [ 150.627594][ T8285] loop9: p1 start 134217728 is beyond EOD, truncated [ 150.652172][ T8285] loop9: p2 size 591360 extends beyond EOD, truncated [ 150.679761][ T8285] loop9: p5 size 591360 extends beyond EOD, [ 150.680084][ T8279] FAULT_INJECTION: forcing a failure. [ 150.680084][ T8279] name fail_futex, interval 1, probability 0, space 0, times 1 [ 150.703642][ T8285] truncated [ 150.726786][ T3002] loop9: p1 < > p2 p4 < p5 > [ 150.735891][ T3002] loop9: partition table partially beyond EOD, truncated [ 150.762112][ T3002] loop9: p1 start 134217728 is beyond EOD, truncated [ 150.770476][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.4.1187 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.770517][ T8279] Tainted: [W]=WARN [ 150.770526][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.770541][ T8279] Call Trace: [ 150.770551][ T8279] [ 150.770561][ T8279] __dump_stack+0x1d/0x30 [ 150.770627][ T8279] dump_stack_lvl+0x95/0xd0 [ 150.770658][ T8279] dump_stack+0x15/0x1b [ 150.770687][ T8279] should_fail_ex+0x263/0x280 [ 150.770717][ T8279] should_fail+0xb/0x20 [ 150.770741][ T8279] get_futex_key+0x12f/0xbe0 [ 150.770841][ T8279] futex_wake+0x84/0x380 [ 150.770864][ T8279] ? perf_lock_task_context+0x260/0x2d0 [ 150.770899][ T8279] do_futex+0x323/0x380 [ 150.770990][ T8279] mm_release+0xa1/0x190 [ 150.771019][ T8279] exit_mm_release+0x25/0x30 [ 150.771123][ T8279] exit_mm+0x37/0x180 [ 150.771155][ T8279] do_exit+0x3fa/0x15a0 [ 150.771195][ T8279] do_group_exit+0xfe/0x140 [ 150.771296][ T8279] ? get_signal+0xe4c/0xf60 [ 150.771370][ T8279] get_signal+0xe54/0xf60 [ 150.771412][ T8279] arch_do_signal_or_restart+0x96/0x450 [ 150.771449][ T8279] exit_to_user_mode_loop+0x6a/0x6f0 [ 150.771513][ T8279] do_syscall_64+0x249/0x370 [ 150.771558][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.771588][ T8279] RIP: 0033:0x7fd649d4c629 [ 150.771616][ T8279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.771640][ T8279] RSP: 002b:00007fd64875d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.771735][ T8279] RAX: fffffffffffffe00 RBX: 00007fd649fc6180 RCX: 00007fd649d4c629 [ 150.771754][ T8279] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000007 [ 150.771771][ T8279] RBP: 00007fd64875d090 R08: 0000000000000000 R09: 0000000000000000 [ 150.771788][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.771862][ T8279] R13: 00007fd649fc6218 R14: 00007fd649fc6180 R15: 00007ffe33e64768 [ 150.771883][ T8279] [ 150.987470][ T3002] loop9: p2 size 591360 extends beyond EOD, truncated [ 151.059487][ T8301] xt_TCPMSS: Only works on TCP SYN packets [ 151.065532][ T3002] loop9: p5 size 591360 extends beyond EOD, truncated [ 151.227779][ T8308] loop1: detected capacity change from 0 to 512 [ 151.258368][ T8308] FAT-fs (loop1): Directory bread(block 199916) failed [ 151.275889][ T8308] FAT-fs (loop1): Directory bread(block 199917) failed [ 151.296764][ T8310] syzkaller0: entered promiscuous mode [ 151.316515][ T8310] syzkaller0: entered allmulticast mode [ 151.322402][ T8308] FAT-fs (loop1): Directory bread(block 199918) failed [ 151.346269][ T8310] tipc: Started in network mode [ 151.361372][ T8308] FAT-fs (loop1): Directory bread(block 199919) failed [ 151.370427][ T8310] tipc: Node identity aa11b294dfa9, cluster identity 4711 [ 151.376088][ T8308] FAT-fs (loop1): Directory bread(block 199920) failed [ 151.387904][ T8310] tipc: Enabled bearer , priority 0 [ 151.415098][ T8308] FAT-fs (loop1): Directory bread(block 199921) failed [ 151.436527][ T8308] FAT-fs (loop1): Directory bread(block 199922) failed [ 151.443809][ T8309] tipc: Resetting bearer [ 151.488317][ T8308] FAT-fs (loop1): Directory bread(block 199923) failed [ 151.498265][ T8309] tipc: Disabling bearer [ 151.536524][ T8307] syz.1.1192: attempt to access beyond end of device [ 151.536524][ T8307] loop1: rw=8390659, sector=799760, nr_sectors = 16128 limit=512 [ 151.540175][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 151.640202][ T8326] loop2: detected capacity change from 0 to 128 [ 151.667779][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 152.579963][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 152.837022][ T8338] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1204'. [ 152.864125][ T8340] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1203'. [ 152.884131][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 152.884147][ T28] audit: type=1400 audit(1772087491.692:1143): avc: denied { map } for pid=8337 comm="syz.2.1204" path="socket:[24109]" dev="sockfs" ino=24109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 152.993418][ T8343] ipvlan1: entered promiscuous mode [ 153.009049][ T8343] ipvlan1: entered allmulticast mode [ 153.022809][ T8343] veth0_vlan: entered allmulticast mode [ 153.619976][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 153.752146][ T8375] netlink: 'syz.1.1209': attribute type 3 has an invalid length. [ 153.782287][ T8375] netlink: 'syz.1.1209': attribute type 3 has an invalid length. [ 153.872765][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1209'. [ 153.959140][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 153.970209][ T28] audit: type=1400 audit(1772087492.782:1144): avc: denied { map } for pid=8390 comm="syz.4.1213" path="/dev/vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 153.997858][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'. [ 154.024991][ T8392] netlink: 'syz.1.1212': attribute type 18 has an invalid length. [ 154.051806][ T28] audit: type=1400 audit(1772087492.812:1145): avc: denied { create } for pid=8390 comm="syz.4.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 154.256252][ T8416] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1220'. [ 154.298471][ T8426] loop2: detected capacity change from 0 to 128 [ 154.305502][ T8426] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.326004][ T8426] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.419055][ T8435] netlink: 'syz.4.1224': attribute type 9 has an invalid length. [ 154.504635][ T8432] lo speed is unknown, defaulting to 1000 [ 154.526407][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1225'. [ 154.542406][ T8432] lo speed is unknown, defaulting to 1000 [ 154.602748][ T8437] loop2: detected capacity change from 0 to 512 [ 154.628009][ T28] audit: type=1400 audit(1772087493.432:1146): avc: denied { mounton } for pid=8431 comm="syz.2.1223" path="/file0" dev="ramfs" ino=24271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 154.659963][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 154.700721][ T8437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.739478][ T8429] loop1: detected capacity change from 0 to 32768 [ 154.758137][ T8437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.791569][ T3307] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 154.808187][ T3307] loop1: p1 start 460800 is beyond EOD, truncated [ 154.827565][ T3307] loop1: p2 size 83886080 extends beyond EOD, truncated [ 154.863691][ T3307] loop1: p5 start 460800 is beyond EOD, truncated [ 154.897246][ T3307] loop1: p6 size 83886080 extends beyond EOD, truncated [ 154.930273][ T8429] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 154.940058][ T8429] loop1: p1 start 460800 is beyond EOD, truncated [ 154.960233][ T8429] loop1: p2 size 83886080 extends beyond EOD, truncated [ 154.990684][ T8429] loop1: p5 start 460800 is beyond EOD, truncated [ 155.012690][ T8429] loop1: p6 size 83886080 extends beyond EOD, truncated [ 155.155234][ T8477] xt_hashlimit: size too large, truncated to 1048576 [ 155.210155][ T8479] loop2: detected capacity change from 0 to 2048 [ 155.233182][ T8479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.278630][ T8479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.356274][ T8479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.428984][ T4008] udevd[4008]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 155.436334][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 155.442002][ T4545] udevd[4545]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 155.470462][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 155.515634][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 155.526933][ T4545] udevd[4545]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 155.538793][ T4008] udevd[4008]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 155.558801][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 155.656935][ T8496] loop2: detected capacity change from 0 to 128 [ 155.669746][ T8498] cgroup: No subsys list or none specified [ 155.693757][ T8496] syz.2.1237: attempt to access beyond end of device [ 155.693757][ T8496] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 155.707420][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 155.734251][ T8496] syz.2.1237: attempt to access beyond end of device [ 155.734251][ T8496] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 155.767426][ T8501] loop8: detected capacity change from 0 to 128 [ 155.782559][ T8496] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 155.794337][ T8503] 9p: Bad value for 'rfdno' [ 155.801919][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 155.809174][ T8501] syz.8.1239: attempt to access beyond end of device [ 155.809174][ T8501] loop8: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 155.830039][ T8496] syz.2.1237: attempt to access beyond end of device [ 155.830039][ T8496] loop2: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 155.840920][ T8501] syz.8.1239: attempt to access beyond end of device [ 155.840920][ T8501] loop8: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 155.876405][ T8501] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 155.884019][ T8496] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 155.897754][ T8496] syz.2.1237: attempt to access beyond end of device [ 155.897754][ T8496] loop2: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 155.907695][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1239'. [ 155.912334][ T8496] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 155.931687][ T8501] syz.8.1239: attempt to access beyond end of device [ 155.931687][ T8501] loop8: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 155.946418][ T8506] loop1: detected capacity change from 0 to 128 [ 155.966924][ T8506] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.969762][ T8501] Buffer I/O error on dev loop8, logical block 77, lost async page write [ 155.980627][ T8496] syz.2.1237: attempt to access beyond end of device [ 155.980627][ T8496] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 156.001752][ T8506] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.016005][ T8496] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 156.024302][ T8501] syz.8.1239: attempt to access beyond end of device [ 156.024302][ T8501] loop8: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 156.030134][ T8496] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 156.059158][ T8501] Buffer I/O error on dev loop8, logical block 78, lost async page write [ 156.060651][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.068172][ T8501] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 156.085758][ T8501] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 156.172479][ T8510] loop1: detected capacity change from 0 to 256 [ 156.179313][ T8510] msdos: Unknown parameter 'nods' [ 156.324136][ T8523] loop1: detected capacity change from 0 to 512 [ 156.345655][ T8523] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1248: inode has both inline data and extents flags [ 156.361078][ T8523] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.361608][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.362537][ T8523] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1248: couldn't read orphan inode 15 (err -117) [ 156.370984][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 156.371016][ C1] EXT4-fs (loop1): initial error at time 1772087495: ext4_orphan_get:1391: inode 15 [ 156.371063][ C1] EXT4-fs (loop1): last error at time 1772087495: ext4_orphan_get:1391: inode 15 [ 156.416202][ T8523] loop1: lost filesystem error report for type 5 error -117 [ 156.418471][ T8523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.467754][ T8529] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1250'. [ 156.477124][ T28] audit: type=1400 audit(1772087495.272:1147): avc: denied { create } for pid=8528 comm="syz.8.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.522602][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.631848][ T8545] loop1: detected capacity change from 0 to 128 [ 156.739995][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 156.747868][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1258'. [ 156.763357][ T8550] xt_SECMARK: invalid mode: 2 [ 156.784169][ T8545] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 156.800167][ T8545] FAT-fs (loop1): Filesystem has been set read-only [ 156.815270][ T8545] bio_check_eod: 5 callbacks suppressed [ 156.815290][ T8545] syz.1.1255: attempt to access beyond end of device [ 156.815290][ T8545] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 156.860220][ T8545] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 156.869795][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1262'. [ 156.880306][ T8563] tmpfs: Bad value for 'nr_blocks' [ 156.885780][ T8545] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 156.894439][ T8562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.904558][ T8545] syz.1.1255: attempt to access beyond end of device [ 156.904558][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 156.919733][ T8545] syz.1.1255: attempt to access beyond end of device [ 156.919733][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 156.920772][ T28] audit: type=1326 audit(1772087495.732:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 156.969513][ T28] audit: type=1326 audit(1772087495.732:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 156.989593][ T8545] syz.1.1255: attempt to access beyond end of device [ 156.989593][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 156.998763][ T28] audit: type=1326 audit(1772087495.732:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 157.019127][ T8545] syz.1.1255: attempt to access beyond end of device [ 157.019127][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 157.045801][ T8545] syz.1.1255: attempt to access beyond end of device [ 157.045801][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 157.060674][ T8545] syz.1.1255: attempt to access beyond end of device [ 157.060674][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 157.079012][ T28] audit: type=1326 audit(1772087495.732:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8544 comm="syz.1.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 157.113396][ T8571] SELinux: syz.4.1267 (8571) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 157.127962][ T8545] syz.1.1255: attempt to access beyond end of device [ 157.127962][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 157.150670][ T28] audit: type=1326 audit(1772087495.942:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8568 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc17c629 code=0x7ffc0000 [ 157.170400][ T8545] syz.1.1255: attempt to access beyond end of device [ 157.170400][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 157.191290][ T8545] syz.1.1255: attempt to access beyond end of device [ 157.191290][ T8545] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 157.399422][ T8595] lo speed is unknown, defaulting to 1000 [ 157.427897][ T8595] lo speed is unknown, defaulting to 1000 [ 157.506690][ T8604] loop9: detected capacity change from 0 to 1024 [ 157.522515][ T8604] EXT4-fs: Ignoring removed oldalloc option [ 157.538981][ T8604] EXT4-fs: Ignoring removed bh option [ 157.555258][ T8604] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.590578][ T8604] FAULT_INJECTION: forcing a failure. [ 157.590578][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 157.625609][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.9.1278 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.625756][ T8604] Tainted: [W]=WARN [ 157.625767][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.625783][ T8604] Call Trace: [ 157.625791][ T8604] [ 157.625801][ T8604] __dump_stack+0x1d/0x30 [ 157.625837][ T8604] dump_stack_lvl+0x95/0xd0 [ 157.625898][ T8604] dump_stack+0x15/0x1b [ 157.625928][ T8604] should_fail_ex+0x263/0x280 [ 157.625957][ T8604] ? alloc_pipe_info+0xad/0x340 [ 157.626006][ T8604] should_failslab+0x8c/0xb0 [ 157.626032][ T8604] __kmalloc_cache_noprof+0x5f/0x410 [ 157.626064][ T8604] alloc_pipe_info+0xad/0x340 [ 157.626129][ T8604] splice_direct_to_actor+0x591/0x670 [ 157.626157][ T8604] ? kstrtouint_from_user+0xa8/0xf0 [ 157.626184][ T8604] ? __pfx_direct_splice_actor+0x10/0x10 [ 157.626211][ T8604] ? avc_policy_seqno+0x15/0x30 [ 157.626242][ T8604] ? selinux_file_permission+0x1f2/0x690 [ 157.626338][ T8604] do_splice_direct+0x119/0x1a0 [ 157.626364][ T8604] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 157.626413][ T8604] do_sendfile+0x382/0x650 [ 157.626448][ T8604] __x64_sys_sendfile64+0x105/0x150 [ 157.626557][ T8604] x64_sys_call+0x2dc4/0x3020 [ 157.626654][ T8604] do_syscall_64+0x12c/0x370 [ 157.626703][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.626732][ T8604] RIP: 0033:0x7f0b1b8fc629 [ 157.626752][ T8604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.626860][ T8604] RSP: 002b:00007f0b1a357028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 157.626885][ T8604] RAX: ffffffffffffffda RBX: 00007f0b1bb75fa0 RCX: 00007f0b1b8fc629 [ 157.626900][ T8604] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 157.626912][ T8604] RBP: 00007f0b1a357090 R08: 0000000000000000 R09: 0000000000000000 [ 157.626925][ T8604] R10: 0000000000040001 R11: 0000000000000246 R12: 0000000000000001 [ 157.626964][ T8604] R13: 00007f0b1bb76038 R14: 00007f0b1bb75fa0 R15: 00007ffc104ef398 [ 157.627013][ T8604] [ 157.629373][ T8611] loop8: detected capacity change from 0 to 256 [ 157.780171][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 157.866141][ T8611] FAT-fs (loop8): Directory bread(block 64) failed [ 157.872829][ T8611] FAT-fs (loop8): Directory bread(block 65) failed [ 157.889870][ T8611] FAT-fs (loop8): Directory bread(block 66) failed [ 157.899354][ T8611] FAT-fs (loop8): Directory bread(block 67) failed [ 157.906876][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.917869][ T8611] FAT-fs (loop8): Directory bread(block 68) failed [ 157.926691][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 157.926710][ T28] audit: type=1400 audit(1772087496.742:1181): avc: denied { write } for pid=8616 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.957569][ T8611] FAT-fs (loop8): Directory bread(block 69) failed [ 157.979447][ T8611] FAT-fs (loop8): Directory bread(block 70) failed [ 157.984796][ T28] audit: type=1400 audit(1772087496.792:1182): avc: denied { write } for pid=8621 comm="syz.9.1282" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 157.997811][ T8611] FAT-fs (loop8): Directory bread(block 71) failed [ 158.016321][ T8611] FAT-fs (loop8): Directory bread(block 72) failed [ 158.023922][ T8611] FAT-fs (loop8): Directory bread(block 73) failed [ 158.041461][ T28] audit: type=1400 audit(1772087496.852:1183): avc: denied { mounton } for pid=8610 comm="syz.8.1280" path="/112/file0/file0" dev="loop8" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 158.139544][ T28] audit: type=1400 audit(1772087496.942:1184): avc: denied { setattr } for pid=8626 comm="syz.1.1287" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.196174][ T28] audit: type=1400 audit(1772087497.002:1185): avc: denied { shutdown } for pid=8626 comm="syz.1.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.229051][ T28] audit: type=1400 audit(1772087497.032:1186): avc: denied { read } for pid=8625 comm="syz.2.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 158.333492][ T8629] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 158.342194][ T8629] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1286'. [ 158.394268][ T8635] lo speed is unknown, defaulting to 1000 [ 158.400764][ T8635] lo speed is unknown, defaulting to 1000 [ 158.527014][ T8641] loop8: detected capacity change from 0 to 512 [ 158.535962][ T8641] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 158.551364][ T8641] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1289: invalid indirect mapped block 1536 (level 2) [ 158.565288][ T8641] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.565539][ T8641] EXT4-fs (loop8): Remounting filesystem read-only [ 158.574724][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 158.574744][ C1] EXT4-fs (loop8): initial error at time 1772087497: ext4_free_branches:1023: inode 11 [ 158.574789][ C1] EXT4-fs (loop8): last error at time 1772087497: ext4_free_branches:1023: inode 11 [ 158.607807][ T8641] EXT4-fs (loop8): 1 truncate cleaned up [ 158.616079][ T8641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.633985][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1289'. [ 158.670238][ T8641] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 158.680287][ T8641] bond1 (unregistering): Released all slaves [ 158.711424][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.720567][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.782277][ T6212] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.820046][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 159.173265][ T8673] msdos: Unknown parameter 'noLots' [ 159.399291][ T8677] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.433067][ T8683] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 159.470068][ T8683] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 159.508800][ T6212] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 159.522127][ T28] audit: type=1400 audit(1772087498.342:1187): avc: denied { relabelto } for pid=8682 comm="" name="tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 159.554461][ T6212] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 159.589555][ T28] audit: type=1400 audit(1772087498.342:1188): avc: denied { associate } for pid=8682 comm="" name="tun" dev="devtmpfs" ino=139 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_exec_t:s0" [ 159.627192][ T6677] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.627192][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1301'. [ 159.859954][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 160.063061][ T34] bridge_slave_1: left allmulticast mode [ 160.068977][ T34] bridge_slave_1: left promiscuous mode [ 160.080087][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.089435][ T34] bridge_slave_0: left allmulticast mode [ 160.102126][ T8704] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1306'. [ 160.121901][ T8704] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1306'. [ 160.122395][ T34] bridge_slave_0: left promiscuous mode [ 160.137142][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.223781][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.234433][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.243984][ T34] bond0 (unregistering): Released all slaves [ 160.254616][ T8691] lo speed is unknown, defaulting to 1000 [ 160.280189][ T8691] lo speed is unknown, defaulting to 1000 [ 160.308613][ T34] hsr_slave_0: left promiscuous mode [ 160.324891][ T34] hsr_slave_1: left promiscuous mode [ 160.340443][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.355132][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.381704][ T34] team0 (unregistering): Port device macvlan1 removed [ 160.427294][ T34] team0 (unregistering): Port device team_slave_1 removed [ 160.440901][ T34] team0 (unregistering): Port device team_slave_0 removed [ 160.507603][ T1022] smc: removing ib device syU× [ 160.572513][ T8725] set_capacity_and_notify: 3 callbacks suppressed [ 160.572531][ T8725] loop9: detected capacity change from 0 to 128 [ 160.602530][ T8725] FAULT_INJECTION: forcing a failure. [ 160.602530][ T8725] name failslab, interval 1, probability 0, space 0, times 0 [ 160.617100][ T8725] CPU: 1 UID: 0 PID: 8725 Comm: syz.9.1309 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.617175][ T8725] Tainted: [W]=WARN [ 160.617182][ T8725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.617194][ T8725] Call Trace: [ 160.617200][ T8725] [ 160.617207][ T8725] __dump_stack+0x1d/0x30 [ 160.617242][ T8725] dump_stack_lvl+0x95/0xd0 [ 160.617389][ T8725] dump_stack+0x15/0x1b [ 160.617418][ T8725] should_fail_ex+0x263/0x280 [ 160.617485][ T8725] should_failslab+0x8c/0xb0 [ 160.617526][ T8725] kmem_cache_alloc_noprof+0x66/0x400 [ 160.617549][ T8725] ? security_inode_alloc+0x37/0x100 [ 160.617602][ T8725] security_inode_alloc+0x37/0x100 [ 160.617635][ T8725] inode_init_always_gfp+0x4b7/0x500 [ 160.617665][ T8725] ? __pfx_fat_alloc_inode+0x10/0x10 [ 160.617695][ T8725] alloc_inode+0x58/0x170 [ 160.617754][ T8725] new_inode+0x1d/0xe0 [ 160.617784][ T8725] fat_build_inode+0x169/0x290 [ 160.617817][ T8725] vfat_lookup+0x166/0x2e0 [ 160.617857][ T8725] __lookup_slow+0x19d/0x260 [ 160.617933][ T8725] lookup_slow+0x3c/0x60 [ 160.617962][ T8725] path_lookupat+0x2f7/0x500 [ 160.617996][ T8725] filename_lookup+0x32a/0x390 [ 160.618126][ T8725] user_path_at+0x3e/0x100 [ 160.618161][ T8725] __se_sys_mount+0x25b/0x2e0 [ 160.618261][ T8725] ? fput+0x8f/0xc0 [ 160.618295][ T8725] __x64_sys_mount+0x67/0x80 [ 160.618323][ T8725] x64_sys_call+0x2d61/0x3020 [ 160.618435][ T8725] do_syscall_64+0x12c/0x370 [ 160.618483][ T8725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.618508][ T8725] RIP: 0033:0x7f0b1b8fc629 [ 160.618526][ T8725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.618596][ T8725] RSP: 002b:00007f0b1a357028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.618616][ T8725] RAX: ffffffffffffffda RBX: 00007f0b1bb75fa0 RCX: 00007f0b1b8fc629 [ 160.618637][ T8725] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 160.618654][ T8725] RBP: 00007f0b1a357090 R08: 0000200000001000 R09: 0000000000000000 [ 160.618671][ T8725] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 160.618687][ T8725] R13: 00007f0b1bb76038 R14: 00007f0b1bb75fa0 R15: 00007ffc104ef398 [ 160.618714][ T8725] [ 160.899958][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 161.111266][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 161.658615][ T8739] loop9: detected capacity change from 0 to 2048 [ 161.672049][ T8739] EXT4-fs: Ignoring removed orlov option [ 161.680368][ T8739] EXT4-fs: Ignoring removed i_version option [ 161.939962][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 162.212091][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.343474][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.398647][ T8691] bridge_slave_0: entered allmulticast mode [ 162.459613][ T8691] bridge_slave_0: entered promiscuous mode [ 162.979950][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 163.202961][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.219673][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.235449][ T8691] bridge_slave_1: entered allmulticast mode [ 163.244844][ T8691] bridge_slave_1: entered promiscuous mode [ 163.297867][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.319863][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.322983][ T8792] loop4: detected capacity change from 0 to 128 [ 163.365563][ T8691] team0: Port device team_slave_0 added [ 163.371139][ T8792] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.388530][ T8691] team0: Port device team_slave_1 added [ 163.404942][ T8792] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.472970][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.491099][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.521058][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.569669][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.583938][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.592737][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.599318][ T8804] loop4: detected capacity change from 0 to 1024 [ 163.623247][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.670334][ T8804] EXT4-fs: inline encryption not supported [ 163.676463][ T8804] EXT4-fs: Ignoring removed nobh option [ 163.695378][ T8804] EXT4-fs: Ignoring removed nobh option [ 163.708932][ T8691] hsr_slave_0: entered promiscuous mode [ 163.716317][ T8691] hsr_slave_1: entered promiscuous mode [ 163.723518][ T8691] debugfs: 'hsr0' already exists in 'hsr' [ 163.729626][ T8691] Cannot create hsr debugfs directory [ 163.740266][ T8804] EXT4-fs: Ignoring removed bh option [ 163.773725][ T8811] loop1: detected capacity change from 0 to 4096 [ 163.787283][ T8804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.809360][ T8811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.818074][ T8804] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1325: Allocating blocks 385-513 which overlap fs metadata [ 163.857600][ T28] audit: type=1326 audit(1772087502.662:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 163.884063][ T8822] EXT4-fs (loop4): pa ffff8881005b13f0: logic 16, phys. 129, len 24 [ 163.892492][ T8822] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 163.908021][ T28] audit: type=1326 audit(1772087502.662:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 163.944904][ T28] audit: type=1326 audit(1772087502.662:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 163.969952][ T28] audit: type=1326 audit(1772087502.662:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 164.019965][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 164.042892][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.057095][ T28] audit: type=1326 audit(1772087502.692:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 164.077825][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.082090][ T28] audit: type=1326 audit(1772087502.692:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 164.121139][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.138940][ T28] audit: type=1326 audit(1772087502.692:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 164.171184][ T28] audit: type=1326 audit(1772087502.712:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 164.195180][ T28] audit: type=1326 audit(1772087502.712:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514a81c629 code=0x7ffc0000 [ 164.259677][ T28] audit: type=1326 audit(1772087502.712:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8810 comm="syz.1.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f514a7dcece code=0x7ffc0000 [ 164.426942][ T8847] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 164.457387][ T8691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.491057][ T8691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.509034][ T8691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.522966][ T8691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.570944][ T8856] netlink: 'syz.4.1334': attribute type 11 has an invalid length. [ 164.716351][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.746516][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.802698][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.809851][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.823730][ T8810] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1328: corrupted inode contents [ 164.846987][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.847251][ T8810] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.1328: mark_inode_dirty error [ 164.873930][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.881270][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.888840][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.889604][ T8810] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1328: corrupted inode contents [ 164.932648][ T8882] loop2: detected capacity change from 0 to 512 [ 164.940268][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.940456][ T8810] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1328: mark_inode_dirty error [ 164.994457][ T8691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.010000][ T8882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.039168][ T8882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.044671][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.049168][ T8882] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 165.059783][ T8810] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1328: corrupted inode contents [ 165.073155][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 165.073841][ T8691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.113988][ T8882] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 165.124476][ T8888] netlink: 'syz.4.1338': attribute type 9 has an invalid length. [ 165.133092][ T8882] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.1337: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 165.183514][ T8893] loop4: detected capacity change from 0 to 256 [ 165.191943][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.192088][ T8882] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 165.201777][ T8810] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.1328: mark_inode_dirty error [ 165.238289][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.241786][ T8882] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1337: couldn't read orphan inode 13 (err -117) [ 165.251109][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 165.251137][ C1] EXT4-fs (loop2): last error at time 1772087504: ext4_ext_check_inode:521: inode 13 [ 165.280596][ T8810] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.1328: corrupted inode contents [ 165.312960][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.313155][ T8810] EXT4-fs error (device loop1): ext4_truncate:4587: inode #15: comm syz.1.1328: mark_inode_dirty error [ 165.364959][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.371010][ T8810] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.371843][ T8882] loop2: lost filesystem error report for type 5 error -117 [ 165.381832][ T8810] EXT4-fs error (device loop1): ext4_evict_inode:266: comm syz.1.1328: couldn't truncate inode 15 (err -117) [ 165.434604][ T8882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.622852][ T8691] veth0_vlan: entered promiscuous mode [ 165.633558][ T8919] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 165.662446][ T8691] veth1_vlan: entered promiscuous mode [ 165.673696][ T8919] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 165.689278][ T8921] loop4: detected capacity change from 0 to 512 [ 165.706367][ T8921] EXT4-fs: Ignoring removed oldalloc option [ 165.726034][ T8691] veth0_macvtap: entered promiscuous mode [ 165.746989][ T8691] veth1_macvtap: entered promiscuous mode [ 165.760993][ T8921] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1342: Parent and EA inode have the same ino 15 [ 165.787414][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.799977][ T8921] loop4: lost filesystem error report for type 5 error -117 [ 165.800156][ T8921] EXT4-fs (loop4): Remounting filesystem read-only [ 165.814288][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 165.814310][ C1] EXT4-fs (loop4): initial error at time 1772087504: ext4_xattr_inode_iget:437 [ 165.814360][ C1] EXT4-fs (loop4): last error at time 1772087504: ext4_xattr_inode_iget:437 [ 165.861270][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.914261][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.927535][ T7236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.941350][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.957574][ T8921] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -30) [ 165.993501][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.003045][ T8921] EXT4-fs (loop4): 1 orphan inode deleted [ 166.009319][ T8921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.033170][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.077963][ T8917] netlink: 'syz.4.1342': attribute type 3 has an invalid length. [ 166.099953][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 166.110814][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 166.123776][ T8942] loop2: detected capacity change from 0 to 128 [ 166.148484][ T8942] bio_check_eod: 5931 callbacks suppressed [ 166.148576][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.148576][ T8942] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 166.203131][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.213791][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.213791][ T8942] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 166.237939][ T8942] buffer_io_error: 1 callbacks suppressed [ 166.237960][ T8942] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 166.296055][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.296055][ T8942] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 166.326998][ T8942] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 166.350095][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.350095][ T8942] loop2: rw=2049, sector=162, nr_sectors = 16 limit=128 [ 166.396728][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.396728][ T8942] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 166.450250][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.450250][ T8942] loop2: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 166.485558][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.485558][ T8942] loop2: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 166.521328][ T8942] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 166.547853][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.547853][ T8942] loop2: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 166.593843][ T8942] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 166.639835][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.639835][ T8942] loop2: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 166.685450][ T8942] syz.2.1345: attempt to access beyond end of device [ 166.685450][ T8942] loop2: rw=8390657, sector=214, nr_sectors = 2 limit=128 [ 166.728277][ T8942] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 166.754648][ T8942] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 166.784525][ T8942] Buffer I/O error on dev loop2, logical block 119, lost async page write [ 166.815489][ T8942] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 166.843444][ T8942] Buffer I/O error on dev loop2, logical block 123, lost async page write [ 166.872157][ T8942] Buffer I/O error on dev loop2, logical block 124, lost async page write [ 167.139047][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1350'. [ 167.149982][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 167.232138][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1350'. [ 167.362149][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 167.492711][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 168.152545][ T9026] loop2: detected capacity change from 0 to 1024 [ 168.163239][ T9026] EXT4-fs: Ignoring removed nobh option [ 168.179973][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 168.240846][ T9026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.259369][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.277471][ T9026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.371717][ T7236] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.623024][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 168.764428][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 169.007780][ T9072] loop9: detected capacity change from 0 to 1024 [ 169.047402][ T9072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.098156][ T28] kauditd_printk_skb: 170 callbacks suppressed [ 169.098175][ T28] audit: type=1400 audit(1772087507.902:1369): avc: denied { setattr } for pid=9071 comm="syz.9.1364" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.175724][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.229946][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 169.388354][ T9091] loop9: detected capacity change from 0 to 512 [ 169.427491][ T9091] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 169.485753][ T9091] EXT4-fs (loop9): 1 truncate cleaned up [ 169.496720][ T3307] ================================================================== [ 169.504871][ T3307] BUG: KCSAN: data-race in __d_drop / fast_dput [ 169.511173][ T3307] [ 169.513618][ T3307] write to 0xffff88811bbd1c10 of 8 bytes by task 3002 on cpu 0: [ 169.521891][ T3307] __d_drop+0x14d/0x240 [ 169.526210][ T3307] __dentry_kill+0x122/0x460 [ 169.530854][ T3307] finish_dput+0x2b/0x200 [ 169.535221][ T3307] dput+0x52/0x60 [ 169.538928][ T3307] lookup_one_qstr_excl+0x15a/0x250 [ 169.544172][ T3307] filename_unlinkat+0x149/0x410 [ 169.549152][ T3307] __se_sys_unlink+0x2b/0xe0 [ 169.553784][ T3307] __x64_sys_unlink+0x1f/0x30 [ 169.558502][ T3307] x64_sys_call+0x2eb6/0x3020 [ 169.563228][ T3307] do_syscall_64+0x12c/0x370 [ 169.567877][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.573815][ T3307] [ 169.576166][ T3307] read to 0xffff88811bbd1c10 of 8 bytes by task 3307 on cpu 1: [ 169.583735][ T3307] fast_dput+0x5f/0x2c0 [ 169.588026][ T3307] dput+0x24/0x60 [ 169.591701][ T3307] filename_unlinkat+0x217/0x410 [ 169.596737][ T3307] __se_sys_unlink+0x2b/0xe0 [ 169.601371][ T3307] __x64_sys_unlink+0x1f/0x30 [ 169.606085][ T3307] x64_sys_call+0x2eb6/0x3020 [ 169.610804][ T3307] do_syscall_64+0x12c/0x370 [ 169.615451][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.621383][ T3307] [ 169.623721][ T3307] value changed: 0xffff888237b4be90 -> 0x0000000000000000 [ 169.630853][ T3307] [ 169.633208][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 169.639478][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 169.649939][ T3307] Tainted: [W]=WARN [ 169.653806][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.664157][ T3307] ================================================================== [ 169.681259][ T9091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.758020][ T28] audit: type=1400 audit(1772087508.562:1370): avc: denied { shutdown } for pid=9089 comm="syz.9.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.831061][ T6610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.882330][ T28] audit: type=1400 audit(1772087508.562:1371): avc: denied { mounton } for pid=9089 comm="syz.9.1365" path="/105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.952933][ T28] audit: type=1400 audit(1772087508.662:1372): avc: denied { ioctl } for pid=9099 comm="syz.4.1367" path="socket:[26528]" dev="sockfs" ino=26528 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.259964][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 170.288893][ T84] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.300119][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.340015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.347201][ T9154] Bluetooth: hci0: command 0x1003 tx timeout [ 172.347208][ T3557] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.380018][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 174.420023][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 175.460006][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 176.510001][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.540002][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.032549][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.043123][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.074731][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.085124][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.143469][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.154022][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.183473][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.193939][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.250148][ T76] bridge_slave_1: left allmulticast mode [ 178.256023][ T76] bridge_slave_1: left promiscuous mode [ 178.262039][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.271007][ T76] bridge_slave_0: left allmulticast mode [ 178.276993][ T76] bridge_slave_0: left promiscuous mode [ 178.283290][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.413458][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.423754][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.434129][ T76] bond0 (unregistering): Released all slaves [ 178.442936][ T76] bond1 (unregistering): Released all slaves [ 178.494317][ T76] tipc: Left network mode [ 178.504589][ T76] hsr_slave_0: left promiscuous mode [ 178.510965][ T76] hsr_slave_1: left promiscuous mode [ 178.518451][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.525953][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.534095][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.541652][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.553558][ T76] veth1_macvtap: left promiscuous mode [ 178.559162][ T76] veth0_macvtap: left promiscuous mode [ 178.565247][ T76] veth1_vlan: left promiscuous mode [ 178.570714][ T76] veth0_vlan: left promiscuous mode [ 178.579954][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.663968][ T76] team0 (unregistering): Port device team_slave_1 removed [ 178.674821][ T76] team0 (unregistering): Port device team_slave_0 removed