last executing test programs: 7m49.310320909s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 7m48.223697327s ago: executing program 4 (id=11): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x380, 0x7ffffffe) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={0x1060, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x80}, 0x7, 0x2, 0x800, 0xff, 0x17, 'syz1\x00', "6532605f4ef0f2bcc8cc282ae1264ce16142a1aed48c0a0043e8448a2d8e8701", "694dfbfaed1972843e19bdc9d3076c53d92e3f0b18798c416dd0495fb2545639", [{0x6, 0x1ff, {0x3, 0x9fd7}}, {0x5, 0x6, {0x0, 0x400}}, {0x8, 0xffff, {0x1, 0xab2b}}, {0x8001, 0x4, {0x1, 0x7}}, {0x5, 0x8, {0x1, 0x8}}, {0x4, 0x3, {0x1, 0x1}}, {0x800, 0x4, {0x2, 0x3}}, {0x2, 0xcac, {0x3}}, {0x406, 0x2, {0x1, 0xaf45}}, {0x2, 0x7, {0x3, 0x4}}, {0x6, 0x6, {0x3, 0x7}}, {0x0, 0x0, {0x2, 0x1}}, {0x4, 0x5, {0x2, 0x3}}, {0x9, 0x3, {0x2, 0x4f4}}, {0xfff9, 0x4, {0x2, 0x100}}, {0x3, 0x7, {0x2, 0xfffffffc}}, {0xd6, 0xff6d, {0x0, 0x7}}, {0xf8b1, 0x7ff, {0x3, 0x4}}, {0x1, 0xff81, {0x3, 0x800}}, {0xfff, 0x9, {0x2, 0x3}}, {0x1, 0x6, {0x2, 0x81}}, {0x9, 0x9, {0x1, 0xb}}, {0xc, 0x79, {0x2, 0x7f}}, {0x7, 0x81, {0x2}}, {0xd, 0xe, {0x2, 0x2}}, {0x0, 0x30, {0x1, 0x6}}, {0x1, 0x3, {0x1, 0x3}}, {0xf000, 0x5, {0x3, 0x8}}, {0xa100, 0x7df1, {0x0, 0x8}}, {0xf2b, 0x5, {0x0, 0x100}}, {0xaca, 0x7b54, {0x0, 0x1f26}}, {0x8, 0x6, {0x2, 0x9}}, {0x800, 0x4, {0x0, 0x4}}, {0x80, 0x0, {0x2, 0x8}}, {0x9, 0x12, {0x1, 0x5}}, {0x7, 0x47, {0x1, 0x7fff}}, {0x3, 0x9, {0x0, 0x6}}, {0xf48, 0x7b3, {0x1, 0x6}}, {0x401, 0x9, {0x0, 0x4}}, {0x8000, 0x531, {0x1, 0xe}}]}}}, {{0x254, 0x1, {{0x1, 0xa0a}, 0xf6, 0x0, 0xfbff, 0xb, 0x1d, 'syz0\x00', "04fdba4ca862bf2214e52dbb541083571caf83edfe5fa870f659de69af37af2f", "e513c3109d4b12391eadfadc12f865775a75f4be8b1562f8b4ad19afeebcf360", [{0x3, 0x7, {0x2, 0x7f}}, {0x9, 0x4, {0x3, 0x6}}, {0x8, 0x6, {0x1, 0x9}}, {0xce74, 0x8780, {0x3, 0x3}}, {0x6, 0xfffb, {0x2, 0x4}}, {0xfffd, 0x200, {0x0, 0xb068}}, {0xe8, 0x8, {0x1, 0x8}}, {0xfff8, 0x1ff, {0x1, 0x9c}}, {0x9, 0x8, {0x2}}, {0xe4f, 0x35, {0x2, 0xe6c}}, {0x1, 0x8, {0x2, 0x1}}, {0xd5, 0x4, {0x0, 0x9}}, {0x2, 0x1, {0x2, 0x899b}}, {0x6, 0x400, {0x2, 0x40}}, {0x3, 0xe1, {0x1, 0x6a0}}, {0x7, 0x7, {0x2, 0x612}}, {0x7fff, 0x81}, {0x1, 0x1, {0x3, 0x7}}, {0x7, 0xf563, {0x2, 0x8}}, {0x2, 0x2, {0x0, 0xe9f6}}, {0x6, 0xffff, {0x1, 0x8}}, {0xfff1, 0x4, {0x0, 0xfffffff4}}, {0x7, 0x55d, {0x1, 0x7fff}}, {0x0, 0x6, {0x0, 0x6416}}, {0x4, 0x0, {0x2, 0x4}}, {0x0, 0x1, {0x2, 0x1d000000}}, {0x4, 0x7, {0x1, 0x400}}, {0x4, 0x8, {0x1, 0x2}}, {0x400, 0x4, {0x3, 0x8}}, {0x1, 0x4aa, {0x1, 0xad}}, {0x2, 0x8540, {0x3, 0x3598}}, {0x1, 0xfb, {0x2, 0x9}}, {0x0, 0x1715, {0x2, 0x6}}, {0xbd, 0x101, {0x0, 0x4}}, {0x5, 0x6, {0x2, 0x80}}, {0x800, 0x5, {0x2, 0x6}}, {0x3b17, 0x7, {0x3, 0x4}}, {0xb, 0xd7, {0x3, 0x6}}, {0x2, 0xfff, {0x0, 0x7f012af0}}, {0x4, 0x3d4, {0x0, 0xffff6e4e}}]}}}, {{0x254, 0x1, {{0x3}, 0x4, 0x2, 0x1a17, 0x6, 0xa, 'syz0\x00', "685890447b4dc88de582a3d8e370930853ab0511f5f1f3d90560f7e4d3b4b1d6", "779c18eae86784265d4b0b46edea4ae3b8432c786c040501a179394f1689fb9a", [{0x28, 0xff, {0x1, 0x1c}}, {0x1fb, 0x9, {0x0, 0x40}}, {0x5, 0xfc85, {0x0, 0x4}}, {0x7, 0x8001, {0x3, 0x2}}, {0x2, 0x7fff, {0x1, 0x2}}, {0x0, 0xc0, {0x1, 0x8a}}, {0x581c, 0xff, {0x0, 0x1}}, {0xf6df, 0x5, {0x0, 0x4}}, {0xa, 0x40, {0x2, 0x40}}, {0xcfb2, 0xb, {0x0, 0xd5}}, {0x1, 0x7, {0x1, 0xfffffe16}}, {0x2, 0xf8ba, {0x3, 0xfffeffff}}, {0x425, 0x794, {0x3, 0x4}}, {0x2, 0x8, {0x3, 0x597}}, {0x7, 0x9, {0x3, 0x80000000}}, {0x81, 0x200, {0x0, 0x244}}, {0x8e7, 0x5, {0x1, 0x1}}, {0x400, 0x1, {0x1, 0x1ff}}, {0x4, 0x40, {0x1, 0x1}}, {0x5, 0x9, {0x2, 0x100}}, {0x4, 0xfffa, {0x2, 0x92b6}}, {0x6, 0x7, {0x0, 0x6e6}}, {0x1, 0x3, {0x0, 0xfff}}, {0x2, 0x7, {0x0, 0x3006}}, {0x5, 0x7, {0x3, 0xd}}, {0x1, 0xc, {0x0, 0x2}}, {0x0, 0x8, {0x2, 0x8}}, {0xb, 0xfff, {0x3}}, {0x60, 0x0, {0x2, 0x175}}, {0xff, 0x88, {0x2, 0xffff}}, {0x7fff, 0x5, {0x3, 0xfffffffe}}, {0x7, 0x8, {0x0, 0xc08c}}, {0xf, 0x401, {0x1, 0x101}}, {0x9, 0x4, {0x3, 0x3}}, {0x2, 0x7b, {0x1, 0x10000}}, {0xffff, 0xc, {0x1}}, {0x6, 0x6, {0x2, 0x9df}}, {0x8, 0x6, {0x2, 0x8df}}, {0x62, 0x9, {0x0, 0xd}}, {0x2, 0x1, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x3, 0xf2, 0xfff, 0x4, 0x2, 'syz0\x00', "21912242eb4360ddeadb6ca73ee7f69006ace757843d8c4651a3a93e0a536cb6", "e07941f3f2e2c54c40a4171496732a65495e944ede7138378aaaf3478ead2755", [{0x7f, 0x8000, {0x1, 0x6}}, {0x8, 0x1, {0x2, 0x2e55}}, {0x3, 0x4, {0x0, 0x9}}, {0x4, 0xe, {0x3, 0x50b3}}, {0x1, 0x81, {0x2, 0x8}}, {0xc30, 0xfffd, {0x2, 0x9d24}}, {0x8, 0x5, {0x3}}, {0x3, 0x10, {0x0, 0x1}}, {0x7, 0xfff9, {0x3, 0x410}}, {0x60, 0x9, {0x1, 0x3}}, {0x1, 0x9, {0x3, 0x2}}, {0x9, 0x0, {0x0, 0x6}}, {0x0, 0x9, {0x3}}, {0x1, 0x3, {0x3, 0xa}}, {0xffff, 0xc, {0x3, 0x8}}, {0x0, 0x7, {0x1, 0x5}}, {0x4, 0x8000, {0x3, 0x8}}, {0x9, 0x827, {0x0, 0x401}}, {0x5, 0x8, {0x0, 0xea8e}}, {0x4, 0x9, {0x3, 0x6}}, {0x3, 0x401, {0x3, 0x10}}, {0x4, 0x0, {0x0, 0x7}}, {0x1ff, 0x7fff, {0x3, 0x8}}, {0x4, 0x8, {0x2, 0x576}}, {0xb1, 0x1, {0x3, 0x4}}, {0x1, 0x7, {0x0, 0xea9f}}, {0x8d1c, 0x3, {0x2}}, {0x9, 0xaece, {0x2, 0x5}}, {0x4, 0xc36, {0x0, 0x4}}, {0x4b8, 0x0, {0x0, 0x16ee}}, {0x200, 0x5, {0x1, 0x4}}, {0x5, 0x7, {0x3, 0x100}}, {0x100, 0x9, {0x2, 0x6}}, {0x8001, 0x9, {0x0, 0x6000000}}, {0x0, 0x331, {0x1, 0x3}}, {0xf, 0x6, {0x3, 0x200}}, {0x0, 0x6, {0x3, 0x7}}, {0xa, 0x4, {0x1}}, {0x3d3, 0x4aa, {0x1, 0xd03b}}, {0x1, 0xacc, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x2, 0xc3, 0x7, 0x5, 0x27, 'syz0\x00', "68a5ec37ca93b6b2097e9e82f88d095da7e9b704c920a2ad15eca6f4cc3b3e22", "1d2e578ffd993d07d7581181e44ad481e4b5399a394e2ed669cbcb7718feaafb", [{0x6, 0x7, {0x3, 0x6}}, {0x401, 0x3, {0x1, 0x590}}, {0xfb9f, 0x6, {0x0, 0x80}}, {0xfff, 0x400, {0x1, 0x7}}, {0x3, 0x1, {0x2, 0x2}}, {0x3, 0x0, {0x2, 0x1}}, {0x871b, 0x3, {0x0, 0x9}}, {0xd, 0x19, {0x2, 0x1}}, {0x80, 0xfff9, {0x0, 0x2}}, {0x7fff, 0xffff, {0x3, 0x5}}, {0x8, 0x4, {0x1, 0x1ff}}, {0x3ff, 0x101, {0x1, 0xc}}, {0xffc0, 0x3, {0x1, 0x8}}, {0x7, 0x3, {0x2, 0x8}}, {0x80, 0xfc00, {0xcaf2d3d2ae8558b4, 0x2}}, {0xb3, 0x9, {0x3, 0xfffffff9}}, {0x4576, 0x4000, {0x0, 0x8}}, {0xf, 0xf299, {0x3, 0x1f87a4c9}}, {0xf6d3, 0x1, {0x2}}, {0x5, 0xfff, {0x2, 0x3ff}}, {0xf000, 0xdb, {0x3, 0x1ff}}, {0x8, 0x5, {0x1, 0xfffff000}}, {0x6, 0x79c, {0x3}}, {0x4, 0x28a}, {0x8, 0x3, {0x2, 0x5}}, {0x7, 0x7, {0x2, 0x8}}, {0x3ff, 0x1, {0x1, 0x6}}, {0x2, 0x6, {0x1}}, {0x8, 0x4, {0x0, 0xfffffff8}}, {0x93d6, 0x40, {0x3}}, {0x9, 0x9, {0x3, 0x3}}, {0x80, 0x5, {0x1, 0x2}}, {0x1, 0x2, {0x3, 0xef1}}, {0xdb, 0x1, {0x1, 0x1ff}}, {0x95, 0x7, {0x0, 0x8}}, {0x7ff, 0x7, {0x3, 0x3c1}}, {0x1, 0x0, {0x3, 0xc52}}, {0x7, 0x2, {0x2, 0x4}}, {0x40, 0x7, {0x3, 0x1}}, {0x5, 0x5, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x3f, 0x58, 0xe, 0x9, 0x0, 'syz0\x00', "78e2ffa7df8c645b109fb39697d5aa3f7fbe7230505b6c8b0f64ced9d1e65bfa", "507f45cf55c003be15e78e200e677fb68aa3f9111d5f88aa3cc5b8cdf8321aba", [{0xe3, 0xddb, {0x1, 0x1}}, {0xf, 0x0, {0x0, 0x6fc}}, {0xaa5, 0x6db, {0x0, 0x10001}}, {0x9, 0xae, {0x1, 0xc9}}, {0x8, 0x0, {0x1, 0x8}}, {0x1, 0x207, {0x2, 0x74c}}, {0xee, 0xdaf5, {0x0, 0x4}}, {0x7, 0x7ff, {0x1, 0x51d2}}, {0x9, 0x5, {0x1, 0x4}}, {0x400, 0x7db, {0x3, 0x952}}, {0x0, 0x81, {0x1, 0x8}}, {0xffff, 0xe, {0x2, 0xa}}, {0x0, 0x0, {0x0, 0x5}}, {0x7ff, 0x5d5, {0x9cefb3d17f56e367, 0x2c7}}, {0x8, 0x1c, {0x2, 0x46685c4d}}, {0xff, 0x7, {0x0, 0x5}}, {0x7, 0x6, {0x1, 0x4}}, {0x0, 0x12, {0x3, 0x10}}, {0x10, 0x8, {0x2, 0xe21}}, {0x98c, 0x2, {0x3, 0xe}}, {0x200, 0x7, {0x2}}, {0x7865, 0x6, {0x1}}, {0x3, 0x6, {0x3, 0x8000}}, {0x9, 0xfffa, {0x2}}, {0x10, 0x7, {0x1, 0xfff}}, {0x6, 0x3, {0x3, 0x1}}, {0xd2, 0x1, {0x2, 0x3}}, {0x1, 0x328d, {0x2, 0x6}}, {0x6, 0xa, {0x0, 0xe}}, {0x8, 0x101, {0x1, 0x6}}, {0xd5, 0x8385, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0xc}}, {0x8, 0x101, {0x3, 0xfffffff6}}, {0x90, 0x7, {0x3, 0x3}}, {0x5, 0x101, {0x0, 0x2}}, {0x8, 0x7, {0x1, 0x7fffffff}}, {0xd, 0x10, {0x1, 0xfffffff9}}, {0x10, 0x4, {0x1, 0x3}}, {0x200, 0x4, {0x1, 0xfffffff9}}, {0xf6ab, 0x2, {0x3, 0xb79}}]}}}, {{0x254, 0x1, {{0x2, 0xb50}, 0x55, 0x6, 0x6, 0xb, 0x20, 'syz0\x00', "26b4e2fb1ad24b1bde012b265c36d12b5b73168697742a7f6ba0fe3708d86e00", "2eb5863efce18056ab19bb83bd36a5a042d339ccb3aabb6d77c2eb370b45b686", [{0x6, 0x1000, {0x2, 0x7}}, {0x3d2, 0x4, {0x0, 0x80}}, {0x3, 0x0, {0x2}}, {0x0, 0xfff7, {0x1, 0x7ff}}, {0x10, 0x2, {0x3, 0x2}}, {0x2, 0x7b78, {0x1, 0x7}}, {0x6ba7, 0x1ff, {0x3, 0x8}}, {0x7, 0x200, {0x1, 0x3}}, {0xa, 0x2, {0x0, 0x800}}, {0x0, 0x0, {0x1, 0x4}}, {0x5, 0x3bf1, {0x0, 0x2}}, {0x9, 0x3c04, {0x1, 0x1}}, {0x93d, 0x3, {0x2, 0x4}}, {0x6, 0x3, {0x0, 0x7}}, {0x9, 0x8, {0x1, 0x8}}, {0x8001, 0x9, {0x2}}, {0x9, 0x7fff, {0x0, 0xb}}, {0xf6b, 0x3ff, {0x0, 0x7fffffff}}, {0x4, 0x101, {0x1, 0x4}}, {0x6, 0x8, {0x1, 0x400}}, {0x2, 0x0, {0x0, 0x6}}, {0x4, 0x320, {0x0, 0x1ff}}, {0x7fff, 0x3, {0x1, 0x6}}, {0x9, 0x0, {0x2, 0x8}}, {0x0, 0x0, {0x2, 0xdd41}}, {0x4, 0x2, {0x2, 0x7}}, {0xa, 0x8, {0x3, 0xfffff951}}, {0x2, 0x101, {0x3, 0x7}}, {0x0, 0x4, {0x7, 0x98}}, {0x8, 0x0, {0x2, 0x6}}, {0x0, 0x8, {0x2, 0x7fffffff}}, {0x2, 0x7d, {0x3, 0x9}}, {0x1, 0x0, {0x2, 0x8}}, {0x8001, 0x4, {0x2, 0xc92}}, {0x5, 0xfb4, {0x1, 0xffffffc0}}, {0xd, 0xe, {0x1, 0x9}}, {0x5, 0x7, {0x1, 0x4}}, {0x6, 0x8, {0x1, 0x6}}, {0xfff2, 0x7, {0x1, 0xe}}, {0x9, 0xff01, {0x2, 0xd}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x44000}, 0x4000046) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1f02}, {0x6, 0x11, 0x7fff}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x808800, &(0x7f0000000040)={[{@noblock_validity}, {@debug}, {@commit={'commit', 0x3d, 0x9}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@grpquota}]}, 0x1, 0x4d8, &(0x7f0000000780)="$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") ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200)={r0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000100)=0x101, 0x4) 7m47.876477275s ago: executing program 4 (id=14): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000240)={[{@nolazytime}, {@abort}, {@lazytime}, {@inode_readahead_blks}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$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") bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x4, 0x4, 0x2, 0x11900, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xff7fffff, 0x3, 0x0, @void, @value, @value=r2}, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x8, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$netlink(0x10, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711813000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m46.92111793s ago: executing program 4 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "9dbd8d", 0x18, 0x6, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0xfffd, 0x0, 0x1, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x4e22, 0x4e24}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket(0x40000000015, 0x805, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) getsockopt(r4, 0x114, 0x2720, 0x0, &(0x7f00000000c0)) 7m43.009773119s ago: executing program 4 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)) mmap(&(0x7f000070b000/0x3000)=nil, 0x3000, 0xb635773f04ebbeef, 0x110, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x110c, &(0x7f0000000540)={0x0, 0xc, 0x80, 0x8000003, 0x7f}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x424a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400080, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x20002880) setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0) 7m43.009522389s ago: executing program 32 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)) mmap(&(0x7f000070b000/0x3000)=nil, 0x3000, 0xb635773f04ebbeef, 0x110, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x110c, &(0x7f0000000540)={0x0, 0xc, 0x80, 0x8000003, 0x7f}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x424a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400080, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x20002880) setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0) 4m16.79202751s ago: executing program 0 (id=901): r0 = socket$inet6(0xa, 0x80003, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_generic(0x10, 0x3, 0x10) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) timer_gettime(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000"], 0x50}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x0, 0x4a}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) io_uring_enter(0xffffffffffffffff, 0x4886, 0x96b3, 0xbf, 0x0, 0x0) 4m12.629141399s ago: executing program 0 (id=909): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149040, 0x2) syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000012c0)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x48, 0x30, 0x1, 0x20, 0x80001, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 4m12.551538723s ago: executing program 0 (id=913): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xc, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x4000000, 0x98, 0xffffffff, 0x200, 0x200, 0x200, 0x98, 0x4, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x35}, 0xff, 0xffffff00, 'ipvlan1\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x21, 0x1, 0x18}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@broadcast, @multicast1, 0x7fffffff, 0xff000000, 'nr0\x00', 'erspan0\x00', {}, {}, 0x62, 0x1, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x2, 0xfffffffc, 0x6, {0x7}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=@newtfilter={0x74, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x9, 0xa, 0x1, {0x4, 0x0, 0xd, 0xf, 0x4}, {0x5, 0x0, 0xc7, 0x0, 0x7, 0x7ff}, 0x2cb8dbbb, 0x800, 0x1000}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$kcm(r1, 0x0, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x2, 0x41}, @exit], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x17aa, &(0x7f0000000080)={0x0, 0x374e, 0x0, 0x2, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1f, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x22ce, 0x1d, 0x0, 0x0, 0x0) 4m12.345712221s ago: executing program 0 (id=917): socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@user_xattr}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone3(0x0, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m11.256641628s ago: executing program 0 (id=926): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 4m10.73087142s ago: executing program 0 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 4m10.712774206s ago: executing program 33 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 2m7.823680744s ago: executing program 6 (id=1408): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0xb0, 0x8}}, &(0x7f0000000000)='syzkaller\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 2m6.905784336s ago: executing program 6 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x44000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m5.681071905s ago: executing program 6 (id=1415): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x3000000, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x421a}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x6}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m4.558239945s ago: executing program 6 (id=1421): lseek(0xffffffffffffffff, 0x2f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x4) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) 2m2.895119675s ago: executing program 6 (id=1424): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 2m1.459175961s ago: executing program 6 (id=1431): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 2m1.313413821s ago: executing program 34 (id=1431): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 13.58062701s ago: executing program 5 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2f01}, [@alu={0x4, 0x0, 0x7, 0x8, 0x3, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 10.69928272s ago: executing program 5 (id=1923): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@grpjquota}, {@errors_remount}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0x5d4, &(0x7f0000001080)="$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") socketpair$tipc(0x1e, 0xbf9de76f07fedae7, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket(0x840000000002, 0x3, 0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@private0, @in6=@mcast2}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) 9.03618237s ago: executing program 2 (id=1928): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2df8, &(0x7f00000000c0)={0x0, 0x2e87, 0x10, 0x3, 0x1d2}, 0x0, 0x0) syz_io_uring_setup(0x378, &(0x7f0000000200)={0x0, 0x2d48, 0x40, 0x3, 0x312, 0x0, r0}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 9.03490403s ago: executing program 5 (id=1929): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20c200a2}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000300000000000000feffffff850000000f000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800150085000000a7000000950000000000000016b3e77d5973eee7724b50b2df1c3db64e89a3427e41978da59d2a348a2a238c12ad34b1d341043f54d4eb3b326f0f42cbc78bf06cd25a72ddfd275d7848765333647e7031291191f76634d42ce3a29cbe55af2845570284bb45013366b655f1961994063979fadb46e090dab8b7a495f099c697a336"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574008000000c0007800800060000000000050005000a00000005000100"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r6 = memfd_create(0x0, 0x0) ftruncate(r6, 0x800799c) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001080)=ANY=[@ANYBLOB="34000000060601010000000000000000070000060900030073797a310000000005000100070000000900020073797a3100000000aeb161ef3c55e7608445591f60038aed7997ba087edd508adafc8f4296712f1bf75f67641348c9bb4e29c985669bd3b4e70c8025"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000000)=""/4102, 0x0) 8.942781271s ago: executing program 2 (id=1932): lseek(0xffffffffffffffff, 0x2f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x4) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/111, 0x6f}], 0x1, 0x0) 7.973876802s ago: executing program 2 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2f01}, [@alu={0x4, 0x0, 0x7, 0x8, 0x3, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 7.871899262s ago: executing program 7 (id=1935): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x644081, 0x100) utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x7}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x7ffffffe, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x201ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x10006, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x40000008, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0xb, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x1, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000005, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc2, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0xa, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x3, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xb4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0xf, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x7fff, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x7fffffff, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x9, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0xf1, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2000002, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x7}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xffffffef, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x2, 0x1}, {0x5}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001a00)={@cgroup, 0xffffffffffffffff, 0x2f, 0x1c, 0x4}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 7.748030696s ago: executing program 5 (id=1936): lseek(0xffffffffffffffff, 0x2f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x4) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/111, 0x6f}], 0x1, 0x0) 7.518949319s ago: executing program 1 (id=1938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x44000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.119944118s ago: executing program 7 (id=1939): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r4, r4) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x6}) 7.116796157s ago: executing program 5 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x26, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_enter(0xffffffffffffffff, 0x47b8, 0x3e82, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) 7.03124956s ago: executing program 2 (id=1942): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) 6.920250107s ago: executing program 1 (id=1944): syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x800001, &(0x7f00000002c0), 0x111, 0x5}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.579233697s ago: executing program 5 (id=1945): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f00000003c0)='%ps \x00'}, 0x20) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x48) socket(0x2c, 0x3, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.533534238s ago: executing program 35 (id=1945): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f00000003c0)='%ps \x00'}, 0x20) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x48) socket(0x2c, 0x3, 0x0) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.0282804s ago: executing program 7 (id=1948): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r7, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r6}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r8, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r6}, 0x20) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r4, 0x1a, 0x0, 0x0, @void, @value=r9, @void, @void, r6}, 0x20) r10 = socket$caif_seqpacket(0x25, 0x5, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r10, 0xffffffffffffffff, 0x1a, 0x20, 0x0, @void, @void, @void, @value=r11, r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000200), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000) 4.679980729s ago: executing program 1 (id=1950): lseek(0xffffffffffffffff, 0x2f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x4) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/111, 0x6f}], 0x1, 0x0) 4.375055996s ago: executing program 7 (id=1951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574008000000c0007800800060000000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 3.082117721s ago: executing program 2 (id=1952): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000180)=0x81, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 3.081782771s ago: executing program 3 (id=1953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000580)) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2f01}, [@alu={0x4, 0x0, 0x7, 0x8, 0x3, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3.081299051s ago: executing program 7 (id=1961): move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f000000a000/0xd000)=nil], &(0x7f0000000180)=[0x7fff], 0x0, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095281ee75c0642036eec6b740c1a4d2d36ba24b40f443dcfa5580260fa381e22c0095e9a4cc71121771b7e453280ee0ce4915929fa951038ae5e86c5f6b26d4664d924d737d7b24a1b584b8c0a"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49bc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}, 0x6101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close_range(r3, r4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="756e6c010d000000000000006d00"], 0xe) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) r7 = openat$autofs(0xffffffffffffff9c, 0x0, 0x845519cee10380f3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$TCSETS(r5, 0x80047456, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x43, {0x2, 0x4000, @multicast2}}, 0x24) 2.965166127s ago: executing program 8 (id=1946): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, 0x0, 0x1b}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80010000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x408) 2.827739599s ago: executing program 1 (id=1954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2f01}, [@alu={0x4, 0x0, 0x7, 0x8, 0x3, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.774267568s ago: executing program 7 (id=1955): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r4 = dup(0xffffffffffffffff) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r5) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.09966638s ago: executing program 3 (id=1956): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./cgroup\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$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") chdir(0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x6, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000000000000001) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_rdma(0x10, 0x3, 0x14) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x41, 0x116094000, 0x41000000}], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, 0x0, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.965420043s ago: executing program 8 (id=1957): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000100), 0x1, 0x585, &(0x7f0000000500)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x87) r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x400000, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_MADVISE={0x19, 0x4a, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10, 0x0, {0x0, r6}}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0x2, 0x0, 0x1c, 0x915ef60a930f8e03, 0x1, {0x0, r6}}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000001811", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x25, 0xc}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f00000000c0)=0x7) write$ppp(r9, &(0x7f00000008c0)="00003be032c6a4", 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, 0x0, 0x0, 0x12}, 0x20) socket$qrtr(0x2a, 0x2, 0x0) 1.944270629s ago: executing program 2 (id=1958): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) syncfs(r3) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb0100180000000000000074000000740000000700000006000000000000010000000076003f10"], &(0x7f0000000b80)=""/17, 0x93, 0x11, 0x1, 0xa}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.846884178s ago: executing program 8 (id=1959): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r0) bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1e) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x1a8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffffffffffd, @perf_bp={0x0, 0x4}, 0x0, 0x10002, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x70bd2d}, 0x14}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001ec0)={0x0, "4292e73cd743f48edb69a9fb697e2d76"}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x508}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.700834049s ago: executing program 3 (id=1960): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x68, &(0x7f00000009c0)=ANY=[@ANYRESHEX], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = getpid() setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, 0x0}, 0x4800) setns(0xffffffffffffffff, 0x66020000) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="08000800000106000400000030029078ac1414aaac1414bb1ed29078ac14141de089ed8cacc67c81272d74e73bb79f5d42bcd7f60a9c9688c1840f29548b5b10d8a44bbaa68d1286fee0ee472775f0feb6832514223361193d254ea8a71e0f7c51f24e8155479eab72ede783eb2bf0071800"/123], 0x2a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'vxcan1\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1, &(0x7f00000003c0)=0x8000, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$eJzs3V1rZGcdAPD/OZNJs7upmarIWrAtbmW36M5sGttGkXYF0auCWu/XkExCyCQTMpO6CUVTvPBSEFHBD+CN4AcQpB9BhILei4oiutVL3SMzcwbzMpMZkslOOvn94GSe57z9/88hc+a8PJwTwJX1QkTcj4hCRLwUEXP5+LQ7w0FnaM33waN3lltDEln21j+SSPJx3Vlb9amIuJEvNhMR3/xaxK30ZNzG3v7GUq1W3cnrlebmdqWxt393fXNprbpW3VpYmH918bXFVxbvZblztbMUEa9/5S8/+eEvvvr6bz73nT8++Nud77by/dInOnlHxPK5AvTRWXexvS26Wtto5yKCjUmrPcXCuLMAAGAYrUPzj0bEp9vH/3NRaB/NAQAAAJMke2M2/pNEZAAAAMDESiNiNpK0nPcFmI00LZc7fXg/HtfTWr3R/OxqfXdrpTUtohTFdHW9Vr2X9xUuRTFp1efzPrbd+svH6gsR8UxE/HjuWrteXq7XVsZ98QMAAACuiBvPHz3///dc2i4DAAAAE6bUtwIAAABMCqf8AAAAMPmc/wMAAMBE+/qbb7aGrPse75W393Y36m/fXak2Nsqbu8vl5frOdnmtXl9rP7Nvc9D6avX69udja/dhpVltNCuNvf0Hm/XdreaD9SOvwAYAAACeoGeef+8PSUQcfPFae4j8OYCDTF94ZsCl8udxJwCMUmHcCQBjMzXuBICxKQ6cwx4CJl0yYPrJzjuda4Xx24vJBwAAGL3bnzx5/797b3/wtQHgw2yYvj4AwGRxdw+uruJZewDeHHUmwLh8pPPxVL/pfR/eMcT9/841hiw7U2IAAMDIzLaHJC3nx+mzkablcsTT7dcCFJPV9Vr1Xn5+8Pu54lOt+nx7yWRgn2EAAAAAAAAAAAAAAAAAAAAAAAAAoCPLksgAAACAiRaR/jVpP80/4vbci7NHrw4ce+vXz9/66cOlZnNnPmI6+edca9R0RDR/lo9/OfNKAAAAALgEOufp+ef8uLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNJ88Oid5e7wJOP+/csRUeoVfypm2p8zUYyI6/9KYurQcklEFEYQ/+DdiLjZK34Sj7MsK+VZ9Ip/7YLjl9qbZiZL8nkPx08j4sYI4sNV9l5r/3O/1/cvjRfan72//1PHvo9n1d3/Tef1w/G7+79Cn/3P04fraf8Yz77/q0rf+O9GPDvViXs/ju5/uvGTTvwkjsW/NWQbv/2t/f2eEw6tstf+73CsSnNzu9LY27+7vrm0Vl2rbi0szL+6+NriK4v3KqvrtWr+t2eYH33q149Pa//1PvFLR9t/Yvu/OFTrs/jv+w8ffaxTKfaKf+dW79/fm33ip/lv32fycmv67W75oFM+7Llf/u6509q/0qf9MwPaf2eo9scXXvrG9//Uc8qJrQEAPAmNvf2NpVqtunNKYWaIeYYuFEaynjdGls9lKcTlSGNchex7nf/H863nnIufKGTVH5x98akYQRrTJ76nhTjrCpOIg9a6hvyHBAAAJsz/D/qTcacCAAAAAAAAAAAAAAAAAAAAV9YZH0s2ExGdMcXBjxM7HvNgPE0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjV/wIAAP//IS7I7w==") sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002900)={&(0x7f0000000400)=ANY=[@ANYBLOB="d0100800", @ANYRES16=0x0], 0x10d0}, 0x1, 0x0, 0x0, 0x20048841}, 0x1) 1.445324996s ago: executing program 8 (id=1962): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) syz_pidfd_open(r3, 0x0) kcmp(0x0, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.250460316s ago: executing program 1 (id=1963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000400), 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fda600000000000008000f0001", 0x21) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) syz_emit_ethernet(0x12, &(0x7f00000003c0)={@link_local, @link_local, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0300000004000000040000000100010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000017bf0dbff3d53eefd71cd022ece7956a00000040000000"], 0x48) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x3ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="6e6b108a3c2434aaa4fd", @ANYRES16, @ANYRES8=r5, @ANYRESDEC=r0, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4010080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 1.160848518s ago: executing program 8 (id=1964): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80010000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x408) 1.015280988s ago: executing program 3 (id=1965): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) gettid() r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000400), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x0, r7}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000040)={@private2, r7}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close_range(r0, 0xffffffffffffffff, 0x0) 642.487252ms ago: executing program 3 (id=1966): lseek(0xffffffffffffffff, 0x2f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x4) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) process_vm_readv(0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/43, 0x2b}], 0x3, &(0x7f0000000300)=[{&(0x7f0000000340)=""/111, 0x6f}], 0x1, 0x0) 246.706531ms ago: executing program 8 (id=1967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x14, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x44000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 207.718493ms ago: executing program 3 (id=1968): close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x158) ioprio_set$pid(0x3, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040885) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, 0x0, 0x0) bind$netlink(r2, 0x0, 0x0) 0s ago: executing program 1 (id=1969): add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd00) keyctl$read(0xb, 0x0, &(0x7f0000000280)=""/90, 0x5a) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) kernel console output (not intermixed with test programs): e syzkaller0 mtu (1514) ! [ 318.417371][ T8607] tipc: Cannot configure node identity twice [ 319.359258][ T8636] loop3: detected capacity change from 0 to 128 [ 321.433322][ T8641] Cannot find add_set index 0 as target [ 321.582190][ T8643] syzkaller0: entered promiscuous mode [ 321.603029][ T8643] syzkaller0: entered allmulticast mode [ 321.647588][ T8644] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 322.005910][ T8649] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 322.199306][ T8636] loop3: detected capacity change from 0 to 1024 [ 322.234335][ T8636] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 322.281718][ T28] audit: type=1400 audit(1773108608.992:1297): avc: denied { cpu } for pid=8654 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 323.297906][ T8682] loop5: detected capacity change from 0 to 512 [ 323.485500][ T8682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.900886][ T8669] Set syz1 is full, maxelem 65536 reached [ 324.049082][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1220'. [ 324.111608][ T28] audit: type=1400 audit(1773108610.722:1298): avc: denied { checkpoint_restore } for pid=8686 comm="syz.6.1220" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.248933][ T8696] loop3: detected capacity change from 0 to 256 [ 325.140861][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.140861][ T8701] loop3: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 325.154822][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.154822][ T8701] loop3: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 325.168686][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.168686][ T8701] loop3: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 325.182635][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.182635][ T8701] loop3: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 325.197397][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.197397][ T8701] loop3: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 325.211411][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.211411][ T8701] loop3: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 325.225255][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.225255][ T8701] loop3: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 325.239046][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.239046][ T8701] loop3: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 325.252914][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.252914][ T8701] loop3: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 325.267088][ T8701] syz.3.1223: attempt to access beyond end of device [ 325.267088][ T8701] loop3: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 325.718781][ T8705] loop6: detected capacity change from 0 to 256 [ 325.749906][ T8703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1224'. [ 325.760025][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.091281][ T8716] loop5: detected capacity change from 0 to 256 [ 327.289875][ T8723] loop6: detected capacity change from 0 to 1024 [ 328.103461][ T8703] loop1: detected capacity change from 0 to 164 [ 329.118615][ T8723] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #4: comm syz.6.1229: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 329.138956][ T8723] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 329.139174][ T8723] EXT4-fs error (device loop6): ext4_quota_enable:7195: comm syz.6.1229: Bad quota inode: 4, type: 1 [ 329.148284][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 329.148299][ C0] EXT4-fs (loop6): initial error at time 1773108615: ext4_ext_check_inode:521: inode 4 [ 329.148345][ C0] EXT4-fs (loop6): last error at time 1773108615: ext4_ext_check_inode:521: inode 4 [ 329.284263][ T8723] loop6: lost filesystem error report for type 5 error -117 [ 329.284456][ T8723] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.313432][ T8723] EXT4-fs (loop6): mount failed [ 329.661428][ T28] audit: type=1400 audit(1773108616.402:1299): avc: denied { write } for pid=8738 comm="syz.5.1236" path="socket:[34381]" dev="sockfs" ino=34381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 331.225397][ T8750] Set syz1 is full, maxelem 65536 reached [ 331.668761][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 331.726705][ T8769] loop6: detected capacity change from 0 to 512 [ 331.747358][ T8769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.005912][ T28] audit: type=1400 audit(1773108618.752:1300): avc: denied { accept } for pid=8768 comm="syz.6.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 332.234729][ T7155] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.446477][ T8787] syzkaller0: entered promiscuous mode [ 332.452046][ T8787] syzkaller0: entered allmulticast mode [ 332.462008][ T8787] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 332.543178][ T8790] loop6: detected capacity change from 0 to 256 [ 332.572345][ T8790] FAT-fs (loop6): Directory bread(block 64) failed [ 332.578944][ T8790] FAT-fs (loop6): Directory bread(block 65) failed [ 332.585609][ T8790] FAT-fs (loop6): Directory bread(block 66) failed [ 332.592168][ T8790] FAT-fs (loop6): Directory bread(block 67) failed [ 332.598773][ T8790] FAT-fs (loop6): Directory bread(block 68) failed [ 332.605413][ T8790] FAT-fs (loop6): Directory bread(block 69) failed [ 332.611983][ T8790] FAT-fs (loop6): Directory bread(block 70) failed [ 332.618599][ T8790] FAT-fs (loop6): Directory bread(block 71) failed [ 332.625202][ T8790] FAT-fs (loop6): Directory bread(block 72) failed [ 332.631735][ T8790] FAT-fs (loop6): Directory bread(block 73) failed [ 334.058735][ T8797] loop5: detected capacity change from 0 to 512 [ 334.066609][ T8797] FAT-fs (loop5): IO charset utfŃľąÉh$Ű‚‰ś#wî•w9Á‹C= Yć’łt ¤•áÁEĹ’&y3‹_ňŔ©„@ĄrRh˘BŔ&5důÓÁxpOęř¤ß‚up‚ęš@HĆäXˇđ[ňć›–[ň˛â°î7VGř†Ą1‰ yŞ{´îţvŽěX±śőŞń)P1uô&-÷@=ő6 not found [ 334.360706][ T8800] loop1: detected capacity change from 0 to 1024 [ 334.436111][ T8800] EXT4-fs (loop1): orphan cleanup on readonly fs [ 334.447412][ T8800] EXT4-fs (loop1): 1 truncate cleaned up [ 334.454198][ T8800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.658420][ T8816] loop3: detected capacity change from 0 to 512 [ 334.746122][ T8816] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.883838][ T8816] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.1255: inode has both inline data and extents flags [ 334.922036][ T8803] Set syz1 is full, maxelem 65536 reached [ 334.958870][ T8816] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 334.963808][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 334.979474][ C1] EXT4-fs (loop3): initial error at time 1773108621: ext4_orphan_get:1391: inode 17 [ 334.989027][ C1] EXT4-fs (loop3): last error at time 1773108621: ext4_orphan_get:1391: inode 17 [ 334.998431][ T8816] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1255: couldn't read orphan inode 17 (err -117) [ 335.053821][ T8816] loop3: lost filesystem error report for type 5 error -117 [ 335.065296][ T8816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.175531][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.347000][ T28] audit: type=1400 audit(1773108622.092:1301): avc: denied { watch watch_reads } for pid=8824 comm="syz.2.1257" path="/291" dev="tmpfs" ino=1580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 335.370363][ T8825] netlink: 'syz.2.1257': attribute type 21 has an invalid length. [ 335.378457][ T8825] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1257'. [ 335.525879][ T8830] wireguard0: entered promiscuous mode [ 335.555982][ T8830] wireguard0: entered allmulticast mode [ 336.228889][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.423743][ T8839] loop3: detected capacity change from 0 to 512 [ 336.521024][ T8839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.186046][ T8849] xt_CT: No such helper "snmp_trap" [ 337.330213][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.651206][ T8859] loop3: detected capacity change from 0 to 256 [ 337.681131][ T8859] FAT-fs (loop3): Directory bread(block 64) failed [ 337.687784][ T8859] FAT-fs (loop3): Directory bread(block 65) failed [ 337.694469][ T8859] FAT-fs (loop3): Directory bread(block 66) failed [ 337.701066][ T8859] FAT-fs (loop3): Directory bread(block 67) failed [ 337.707791][ T8859] FAT-fs (loop3): Directory bread(block 68) failed [ 337.714484][ T8859] FAT-fs (loop3): Directory bread(block 69) failed [ 337.721294][ T8859] FAT-fs (loop3): Directory bread(block 70) failed [ 337.728062][ T8859] FAT-fs (loop3): Directory bread(block 71) failed [ 337.734814][ T8859] FAT-fs (loop3): Directory bread(block 72) failed [ 337.741422][ T8859] FAT-fs (loop3): Directory bread(block 73) failed [ 338.730542][ T8865] loop5: detected capacity change from 0 to 512 [ 339.903503][ T8871] loop1: detected capacity change from 0 to 512 [ 339.954007][ T8871] FAT-fs (loop1): IO charset utfŃľąÉh$Ű‚‰ś#wî•w9Á‹C= Yć’łt ¤•áÁEĹ’&y3‹_ňŔ©„@ĄrRh˘BŔ&5důÓÁxpOęř¤ß‚up‚ęš@HĆäXˇđ[ňć›–[ň˛â°î7VGř†Ą1‰ yŞ{´îţvŽěX±śőŞń)P1uô&-÷@=ő6 not found [ 340.548091][ T8877] loop3: detected capacity change from 0 to 512 [ 340.674705][ T8877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.691037][ T8877] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.117089][ T8894] loop6: detected capacity change from 0 to 1024 [ 341.764295][ T8894] EXT4-fs: inline encryption not supported [ 341.773998][ T8894] EXT4-fs: Ignoring removed bh option [ 341.882561][ T8894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.009494][ T8894] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 342.023969][ T28] audit: type=1400 audit(1773108628.742:1302): avc: denied { setattr } for pid=8892 comm="syz.6.1286" name="#18" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 342.385429][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.477880][ T8894] SET target dimension over the limit! [ 342.507907][ T7155] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.520029][ T8906] loop1: detected capacity change from 0 to 128 [ 343.731734][ T8922] loop6: detected capacity change from 0 to 512 [ 343.754890][ T8917] xt_CT: No such helper "snmp_trap" [ 345.226976][ T8884] Set syz1 is full, maxelem 65536 reached [ 345.306968][ T8947] loop1: detected capacity change from 0 to 256 [ 345.344621][ T8945] xt_CT: No such helper "snmp_trap" [ 345.502136][ T8947] FAT-fs (loop1): Directory bread(block 64) failed [ 345.508778][ T8947] FAT-fs (loop1): Directory bread(block 65) failed [ 345.515562][ T8947] FAT-fs (loop1): Directory bread(block 66) failed [ 345.522098][ T8947] FAT-fs (loop1): Directory bread(block 67) failed [ 345.528753][ T8947] FAT-fs (loop1): Directory bread(block 68) failed [ 345.535466][ T8947] FAT-fs (loop1): Directory bread(block 69) failed [ 345.542140][ T8947] FAT-fs (loop1): Directory bread(block 70) failed [ 345.548797][ T8947] FAT-fs (loop1): Directory bread(block 71) failed [ 345.555510][ T8947] FAT-fs (loop1): Directory bread(block 72) failed [ 345.562110][ T8947] FAT-fs (loop1): Directory bread(block 73) failed [ 346.112203][ T8956] loop5: detected capacity change from 0 to 512 [ 347.512791][ T8956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.676773][ T28] audit: type=1400 audit(1773108634.422:1303): avc: denied { read } for pid=8965 comm="syz.3.1294" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.700227][ T8966] netlink: 'syz.3.1294': attribute type 21 has an invalid length. [ 347.714595][ T8966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1294'. [ 347.796027][ T8966] loop3: detected capacity change from 0 to 512 [ 347.820008][ T8966] vfat: Unknown parameter '˙˙' [ 347.899959][ T8968] tipc: Enabling of bearer rejected, failed to enable media [ 347.911489][ T8968] tipc: Enabled bearer , priority 0 [ 348.123468][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.773994][ T8977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.167562][ T3376] tipc: Node number set to 132880972 [ 349.266140][ T8988] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1305'. [ 349.347118][ T28] audit: type=1400 audit(1773108636.092:1304): avc: denied { create } for pid=8990 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 349.368878][ T28] audit: type=1400 audit(1773108636.112:1305): avc: denied { ioctl } for pid=8990 comm="syz.1.1306" path="socket:[35480]" dev="sockfs" ino=35480 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 351.419302][ T9011] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1312'. [ 351.835320][ T9023] loop3: detected capacity change from 0 to 128 [ 351.851276][ T9023] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.866684][ T9023] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.885784][ T9025] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1319'. [ 351.938009][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 352.154154][ T9035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1318'. [ 352.582191][ T9037] loop1: detected capacity change from 0 to 512 [ 352.612170][ T9037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.936505][ T9053] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1323'. [ 352.955772][ T9053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1323'. [ 353.004045][ T9039] sctp: [Deprecated]: syz.5.1323 (pid 9039) Use of int in maxseg socket option. [ 353.004045][ T9039] Use struct sctp_assoc_value instead [ 353.029668][ T9039] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 353.054703][ T9039] SELinux: failed to load policy [ 353.205740][ T9055] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1326'. [ 353.823473][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.733618][ T9071] loop3: detected capacity change from 0 to 8192 [ 355.815479][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.859482][ T9076] lo speed is unknown, defaulting to 1000 [ 355.882124][ T9076] lo speed is unknown, defaulting to 1000 [ 355.905084][ T28] audit: type=1400 audit(1773108642.652:1306): avc: denied { ioctl } for pid=9075 comm="syz.6.1341" path="socket:[34764]" dev="sockfs" ino=34764 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 355.918861][ T9076] lo speed is unknown, defaulting to 1000 [ 356.334909][ T309] kworker/u8:5 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 356.356273][ T309] CPU: 0 UID: 0 PID: 309 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 356.356315][ T309] Tainted: [W]=WARN [ 356.356325][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.356340][ T309] Workqueue: loop3 loop_rootcg_workfn [ 356.356379][ T309] Call Trace: [ 356.356387][ T309] [ 356.356396][ T309] __dump_stack+0x1d/0x30 [ 356.356444][ T309] dump_stack_lvl+0x95/0xd0 [ 356.356472][ T309] dump_stack+0x15/0x1b [ 356.356499][ T309] dump_header+0x80/0x240 [ 356.356552][ T309] oom_kill_process+0x295/0x350 [ 356.356578][ T309] out_of_memory+0x97d/0xb80 [ 356.356609][ T309] try_charge_memcg+0x62e/0xa10 [ 356.356692][ T309] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 356.356738][ T309] __swap_cache_prepare_and_add+0x386/0x530 [ 356.356785][ T309] swap_cache_alloc_folio+0xa2/0x120 [ 356.356833][ T309] swap_cluster_readahead+0x26e/0x3d0 [ 356.356932][ T309] shmem_swapin_folio+0x951/0x1360 [ 356.357023][ T309] ? __rcu_read_unlock+0x4e/0x70 [ 356.357050][ T309] ? filemap_get_entry+0x392/0x3d0 [ 356.357078][ T309] shmem_get_folio_gfp+0x278/0xd60 [ 356.357163][ T309] shmem_write_begin+0xfc/0x1f0 [ 356.357200][ T309] generic_perform_write+0x183/0x490 [ 356.357319][ T309] shmem_file_write_iter+0xc5/0xf0 [ 356.357357][ T309] lo_rw_aio+0x67d/0x730 [ 356.357446][ T309] loop_process_work+0x56c/0xac0 [ 356.357484][ T309] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 356.357535][ T309] ? __rcu_read_unlock+0x4e/0x70 [ 356.357602][ T309] ? __perf_event_task_sched_in+0xa65/0xad0 [ 356.357631][ T309] ? update_load_avg+0x5d/0x680 [ 356.357672][ T309] ? __list_add_valid_or_report+0x38/0xe0 [ 356.357734][ T309] ? __perf_event_task_sched_out+0x192/0x710 [ 356.357767][ T309] loop_rootcg_workfn+0x22/0x30 [ 356.357794][ T309] process_scheduled_works+0x4de/0x9e0 [ 356.357913][ T309] worker_thread+0x581/0x770 [ 356.357973][ T309] ? __pfx_worker_thread+0x10/0x10 [ 356.358011][ T309] kthread+0x22a/0x280 [ 356.358036][ T309] ? __pfx_kthread+0x10/0x10 [ 356.358060][ T309] ret_from_fork+0x150/0x360 [ 356.358098][ T309] ? __pfx_kthread+0x10/0x10 [ 356.358130][ T309] ret_from_fork_asm+0x1a/0x30 [ 356.358173][ T309] [ 356.358204][ T309] memory: usage 307200kB, limit 307200kB, failcnt 3506 [ 356.587056][ T309] memory+swap: usage 312148kB, limit 9007199254740988kB, failcnt 0 [ 356.595041][ T309] kmem: usage 306896kB, limit 9007199254740988kB, failcnt 0 [ 356.602585][ T309] Memory cgroup stats for /syz3: [ 356.602912][ T309] cache 307200 [ 356.611371][ T309] rss 0 [ 356.614287][ T309] shmem 0 [ 356.617279][ T309] mapped_file 0 [ 356.621436][ T309] dirty 8192 [ 356.631212][ T309] writeback 294912 [ 356.635072][ T309] workingset_refault_anon 784 [ 356.639906][ T309] workingset_refault_file 4674 [ 356.644734][ T309] swap 5066752 [ 356.648178][ T309] swapcached 14176256 [ 356.652299][ T309] pgpgin 333703 [ 356.683858][ T309] pgpgout 333627 [ 356.687453][ T309] pgfault 342873 [ 356.703793][ T309] pgmajfault 197 [ 356.707385][ T309] inactive_anon 0 [ 356.726593][ T309] active_anon 0 [ 356.730253][ T309] inactive_file 307200 [ 356.734654][ T9076] infiniband syU×: set down [ 356.739268][ T4243] lo speed is unknown, defaulting to 1000 [ 356.747464][ T9076] infiniband syU×: added lo [ 356.752394][ T9076] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 356.752669][ T9076] infiniband syU×: Couldn't open port 1 [ 356.754735][ T309] active_file 4096 [ 356.774732][ T309] unevictable 0 [ 356.778330][ T309] hierarchical_memory_limit 314572800 [ 356.783794][ T309] hierarchical_memsw_limit 9223372036854771712 [ 356.790000][ T309] total_cache 307200 [ 356.796640][ T309] total_rss 0 [ 356.799956][ T309] total_shmem 0 [ 356.802728][ T9076] RDS/IB: syU×: added [ 356.809655][ T309] total_mapped_file 0 [ 356.812171][ T9076] smc: adding ib device syU× with port count 1 [ 356.813670][ T309] total_dirty 8192 [ 356.813681][ T309] total_writeback 294912 [ 356.827898][ T9076] smc: ib device syU× port 1 has no pnetid [ 356.833933][ T309] total_workingset_refault_anon 784 [ 356.839270][ T309] total_workingset_refault_file 4674 [ 356.843985][ T4243] lo speed is unknown, defaulting to 1000 [ 356.850454][ T309] total_swap 5066752 [ 356.851513][ T9076] lo speed is unknown, defaulting to 1000 [ 356.854515][ T309] total_swapcached 14176256 [ 356.854527][ T309] total_pgpgin 333703 [ 356.854537][ T309] total_pgpgout 333627 [ 356.854547][ T309] total_pgfault 342873 [ 356.854555][ T309] total_pgmajfault 197 [ 356.894356][ T309] total_inactive_anon 0 [ 356.898608][ T309] total_active_anon 0 [ 356.902599][ T309] total_inactive_file 307200 [ 356.907569][ T309] total_active_file 4096 [ 356.911826][ T309] total_unevictable 0 [ 356.916981][ T309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1328,pid=9069,uid=0 [ 356.931927][ T309] Memory cgroup out of memory: Killed process 9069 (syz.3.1328) total-vm:96340kB, anon-rss:1228kB, file-rss:22496kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 356.953496][ T9076] lo speed is unknown, defaulting to 1000 [ 357.023507][ T9076] lo speed is unknown, defaulting to 1000 [ 357.080924][ T9076] lo speed is unknown, defaulting to 1000 [ 357.118980][ T9076] lo speed is unknown, defaulting to 1000 [ 357.188096][ T9093] loop6: detected capacity change from 0 to 512 [ 357.212974][ T9089] loop5: detected capacity change from 0 to 4096 [ 357.230646][ T9093] EXT4-fs (loop6): 1 truncate cleaned up [ 357.257103][ T9091] loop1: detected capacity change from 0 to 512 [ 357.260716][ T9093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.276536][ T9089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.306248][ T9091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.397330][ T9091] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.539735][ T9089] netlink: 'syz.5.1331': attribute type 21 has an invalid length. [ 357.587410][ T9089] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1331'. [ 357.727619][ T7155] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.524423][ T9117] wireguard0: entered promiscuous mode [ 358.575583][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 358.584666][ T9117] wireguard0: entered allmulticast mode [ 359.582378][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.592819][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.298111][ T9130] loop3: detected capacity change from 0 to 128 [ 360.661889][ T9137] loop5: detected capacity change from 0 to 512 [ 360.715376][ T9137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.778525][ T9139] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1338'. [ 361.141410][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.171425][ T9144] loop3: detected capacity change from 0 to 128 [ 361.216017][ T9144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.230992][ T9143] rdma_rxe: rxe_newlink: failed to add lo [ 361.259774][ T9144] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.497641][ T9154] loop6: detected capacity change from 0 to 512 [ 361.575728][ T28] audit: type=1400 audit(1773108648.322:1307): avc: denied { ioctl } for pid=9142 comm="syz.3.1358" path="socket:[36715]" dev="sockfs" ino=36715 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 361.623973][ T9157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9157 comm=syz.1.1357 [ 361.691991][ T9154] loop6: detected capacity change from 0 to 32768 [ 361.774512][ T3306] loop6: p1 < > p3 < p5 p6 > [ 361.779386][ T3306] loop6: partition table partially beyond EOD, truncated [ 361.789332][ T3306] loop6: p6 size 655360 extends beyond EOD, truncated [ 361.872332][ T9154] loop6: p1 < > p3 < p5 p6 > [ 361.877736][ T9154] loop6: partition table partially beyond EOD, truncated [ 361.885206][ T28] audit: type=1400 audit(1773108648.582:1308): avc: denied { mount } for pid=9163 comm="syz.1.1351" name="/" dev="rpc_pipefs" ino=36725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 361.910419][ T9154] loop6: p6 size 655360 extends beyond EOD, truncated [ 361.952755][ T9164] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.961008][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 361.978099][ T9166] loop5: detected capacity change from 0 to 256 [ 361.986860][ T28] audit: type=1400 audit(1773108648.692:1309): avc: denied { write } for pid=9163 comm="syz.1.1351" path="socket:[36744]" dev="sockfs" ino=36744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 362.130593][ T9166] FAT-fs (loop5): Directory bread(block 64) failed [ 362.137316][ T9166] FAT-fs (loop5): Directory bread(block 65) failed [ 362.144033][ T9166] FAT-fs (loop5): Directory bread(block 66) failed [ 362.150676][ T9166] FAT-fs (loop5): Directory bread(block 67) failed [ 362.157355][ T9166] FAT-fs (loop5): Directory bread(block 68) failed [ 362.164054][ T9166] FAT-fs (loop5): Directory bread(block 69) failed [ 362.170926][ T9166] FAT-fs (loop5): Directory bread(block 70) failed [ 362.177609][ T9166] FAT-fs (loop5): Directory bread(block 71) failed [ 362.184364][ T9166] FAT-fs (loop5): Directory bread(block 72) failed [ 362.191060][ T9166] FAT-fs (loop5): Directory bread(block 73) failed [ 362.770256][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.844110][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 362.855650][ T3700] udevd[3700]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 362.866850][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 362.880619][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 362.922920][ T3700] udevd[3700]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 362.935184][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 362.947104][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 362.958805][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 363.740207][ T9180] loop6: detected capacity change from 0 to 8192 [ 363.900658][ T3306] loop6: p1 < > p2 p4 < p5 > [ 363.922877][ T3306] loop6: partition table partially beyond EOD, truncated [ 363.962271][ T3306] loop6: p1 start 134217728 is beyond EOD, truncated [ 363.997344][ T3306] loop6: p2 size 591360 extends beyond EOD, truncated [ 364.066244][ T3306] loop6: p5 size 591360 extends beyond EOD, truncated [ 364.337981][ T9180] loop6: p1 < > p2 p4 < p5 > [ 364.362871][ T9180] loop6: partition table partially beyond EOD, truncated [ 364.387805][ T9180] loop6: p1 start 134217728 is beyond EOD, truncated [ 364.419708][ T9180] loop6: p2 size 591360 extends beyond EOD, truncated [ 364.589914][ T9217] xt_CT: No such helper "snmp_trap" [ 364.966578][ T9180] loop6: p5 size 591360 extends beyond EOD, truncated [ 365.034058][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 365.040219][ T4603] Bluetooth: hci0: command 0x1003 tx timeout [ 365.217956][ T9258] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 365.224525][ T9258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.236270][ T9258] vhci_hcd vhci_hcd.0: Device attached [ 365.248434][ T9258] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 365.254984][ T9258] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.266593][ T9258] vhci_hcd vhci_hcd.0: Device attached [ 365.275803][ T9258] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 365.283052][ T9258] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.459681][ T9269] loop3: detected capacity change from 0 to 1024 [ 366.409260][ T9258] vhci_hcd vhci_hcd.0: Device attached [ 366.607207][ T9275] loop5: detected capacity change from 0 to 512 [ 367.440142][ T4243] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 368.428732][ T9269] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 368.855533][ T9267] vhci_hcd: connection closed [ 368.855701][ T50] vhci_hcd vhci_hcd.3: stop threads [ 368.865995][ T50] vhci_hcd vhci_hcd.3: release socket [ 368.871666][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 368.878097][ T9263] vhci_hcd: connection closed [ 368.878232][ T9259] vhci_hcd: connection reset by peer [ 369.035180][ T50] vhci_hcd vhci_hcd.3: stop threads [ 369.040451][ T50] vhci_hcd vhci_hcd.3: release socket [ 369.055256][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 369.064043][ T50] vhci_hcd vhci_hcd.3: stop threads [ 369.069749][ T50] vhci_hcd vhci_hcd.3: release socket [ 369.078989][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 369.142800][ T9284] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1367'. [ 369.153234][ T9284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1367'. [ 369.163101][ T9284] sctp: [Deprecated]: syz.3.1367 (pid 9284) Use of int in maxseg socket option. [ 369.163101][ T9284] Use struct sctp_assoc_value instead [ 369.178814][ T9284] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 369.189099][ T9284] SELinux: failed to load policy [ 369.562432][ T9290] loop1: detected capacity change from 0 to 1024 [ 369.594512][ T9290] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 369.606965][ T9290] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 369.729043][ T9290] EXT4-fs (loop1): invalid journal inode [ 369.874696][ T9290] EXT4-fs (loop1): can't get journal size [ 369.885633][ T9290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.924378][ T9301] lo speed is unknown, defaulting to 1000 [ 370.513167][ T9300] loop5: detected capacity change from 0 to 512 [ 370.520121][ T9300] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 372.476420][ T4243] usb 7-1: enqueue for inactive port 0 [ 372.482009][ T4243] usb 7-1: enqueue for inactive port 0 [ 372.553829][ T4243] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 372.582796][ T9300] EXT4-fs (loop5): 1 truncate cleaned up [ 372.738084][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.750887][ T9300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.226204][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1372'. [ 373.250029][ T9311] xt_CT: No such helper "snmp_trap" [ 373.352102][ T9315] netlink: 'syz.6.1385': attribute type 16 has an invalid length. [ 373.369463][ T9315] netlink: 'syz.6.1385': attribute type 17 has an invalid length. [ 373.419335][ T9315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.509599][ T9315] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.574622][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.583664][ T9315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.689676][ T4236] lo speed is unknown, defaulting to 1000 [ 373.697667][ T4236] syU×: Port: 1 Link ACTIVE [ 373.709314][ T3409] lo speed is unknown, defaulting to 1000 [ 373.836751][ T9320] lo speed is unknown, defaulting to 1000 [ 373.857148][ T9323] tipc: Enabled bearer , priority 0 [ 374.030068][ T9327] xt_CT: No such helper "snmp_trap" [ 374.350929][ T9335] tipc: Resetting bearer [ 374.358030][ T9326] syzkaller0: entered promiscuous mode [ 374.372660][ T9322] tipc: Resetting bearer [ 374.379321][ T28] audit: type=1400 audit(1773108661.122:1310): avc: denied { write } for pid=9324 comm="syz.6.1377" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.414322][ T28] audit: type=1400 audit(1773108661.152:1311): avc: denied { open } for pid=9324 comm="syz.6.1377" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.453408][ T9322] tipc: Disabling bearer [ 374.477841][ T9338] loop5: detected capacity change from 0 to 128 [ 376.629010][ T9355] loop1: detected capacity change from 0 to 512 [ 376.751676][ T9357] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 376.781111][ T9357] bond5 (unregistering): Released all slaves [ 376.807676][ T28] audit: type=1400 audit(1773108663.552:1312): avc: denied { create } for pid=9356 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 376.848704][ T9355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.864615][ T9355] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.871799][ T9365] syzkaller0: entered promiscuous mode [ 376.881632][ T9365] syzkaller0: entered allmulticast mode [ 377.851391][ T9373] netlink: 'syz.6.1386': attribute type 29 has an invalid length. [ 377.913523][ T9373] netlink: 'syz.6.1386': attribute type 29 has an invalid length. [ 378.023863][ T4248] lo speed is unknown, defaulting to 1000 [ 378.029685][ T4248] syU×: Port: 1 Link DOWN [ 378.243931][ T4241] lo speed is unknown, defaulting to 1000 [ 378.264269][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.629884][ T9389] loop3: detected capacity change from 0 to 512 [ 378.640978][ T9389] FAT-fs (loop3): IO charset utfŃľąÉh$Ű‚‰ś#wî•w9Á‹C= Yć’łt ¤•áÁEĹ’&y3‹_ňŔ©„@ĄrRh˘BŔ&5důÓÁxpOęř¤ß‚up‚ęš@HĆäXˇđ[ňć›–[ň˛â°î7VGř†Ą1‰ yŞ{´îţvŽěX±śőŞń)P1uô&-÷@=ő6 not found [ 378.920244][ T9394] lo speed is unknown, defaulting to 1000 [ 379.451344][ T3653] Bluetooth: hci0: Frame reassembly failed (-84) [ 379.467240][ T9388] loop5: detected capacity change from 0 to 128 [ 380.640519][ T28] audit: type=1400 audit(1773108667.382:1313): avc: denied { accept } for pid=9396 comm="syz.2.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 380.807563][ T9388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.067204][ T9388] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.231972][ T9409] loop1: detected capacity change from 0 to 1024 [ 381.466388][ T9409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.488436][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.513930][ T4603] Bluetooth: hci0: command 0x1003 tx timeout [ 381.520018][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 381.585662][ T9417] loop3: detected capacity change from 0 to 128 [ 381.728854][ T9415] tipc: Enabling of bearer rejected, failed to enable media [ 381.737922][ T9415] syzkaller0: entered promiscuous mode [ 381.743436][ T9415] syzkaller0: entered allmulticast mode [ 381.750673][ T9415] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 382.874186][ T9429] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 383.936833][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1400'. [ 384.233689][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.251929][ T9450] loop3: detected capacity change from 0 to 1764 [ 386.276226][ T9462] lo speed is unknown, defaulting to 1000 [ 386.779466][ T9468] tipc: Enabling of bearer rejected, failed to enable media [ 386.789701][ T9468] syzkaller0: entered promiscuous mode [ 387.199148][ T9468] syzkaller0: entered allmulticast mode [ 387.206628][ T9469] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 387.311729][ T9475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9475 comm=syz.1.1412 [ 387.539007][ T28] audit: type=1400 audit(1773108674.202:1314): avc: denied { name_bind } for pid=9472 comm="syz.2.1414" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 387.741965][ T9481] netlink: 'syz.3.1425': attribute type 16 has an invalid length. [ 387.753301][ T9481] netlink: 'syz.3.1425': attribute type 17 has an invalid length. [ 387.776031][ T9481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.861623][ T9484] lo speed is unknown, defaulting to 1000 [ 387.989771][ T9486] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 388.378431][ T9494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.049136][ T9499] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1430'. [ 389.076141][ T9502] loop6: detected capacity change from 0 to 128 [ 389.082787][ T9499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1430'. [ 389.093870][ T9499] netlink: 'syz.2.1430': attribute type 2 has an invalid length. [ 389.977035][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'. [ 389.990921][ T9502] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.016297][ T9502] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.076578][ T9497] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1430'. [ 390.350754][ T9518] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 390.421181][ T28] audit: type=1400 audit(1773108677.152:1315): avc: denied { rmdir } for pid=7155 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 390.633117][ T9515] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.690949][ T9522] tipc: Enabling of bearer rejected, failed to enable media [ 390.707962][ T9522] syzkaller0: entered promiscuous mode [ 390.713514][ T9522] syzkaller0: entered allmulticast mode [ 390.721323][ T9522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 391.014880][ T9526] loop1: detected capacity change from 0 to 512 [ 392.191043][ T9535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1429'. [ 392.245238][ T9530] lo speed is unknown, defaulting to 1000 [ 392.408329][ T9540] loop3: detected capacity change from 0 to 8192 [ 392.749838][ T9530] chnl_net:caif_netlink_parms(): no params data found [ 392.862603][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.872476][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.892211][ T50] bond0 (unregistering): Released all slaves [ 392.912109][ T50] bond1 (unregistering): Released all slaves [ 392.957685][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.973961][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.993500][ T9530] bridge_slave_0: entered allmulticast mode [ 393.000436][ T9530] bridge_slave_0: entered promiscuous mode [ 393.007443][ T50] tipc: Disabling bearer [ 393.012750][ T50] tipc: Disabling bearer [ 393.034052][ T50] tipc: Left network mode [ 393.038519][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.045861][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.053128][ T9530] bridge_slave_1: entered allmulticast mode [ 393.086449][ T9530] bridge_slave_1: entered promiscuous mode [ 393.096453][ T9569] netlink: 'syz.2.1435': attribute type 16 has an invalid length. [ 393.232933][ T9545] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9545 comm=syz.5.1428 [ 393.248565][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.453903][ T9569] netlink: 'syz.2.1435': attribute type 17 has an invalid length. [ 393.546087][ T9585] xt_CT: No such helper "snmp_trap" [ 393.576567][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.818330][ T9569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.847849][ T50] hsr_slave_0: left promiscuous mode [ 393.853614][ T50] hsr_slave_1: left promiscuous mode [ 393.859634][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.867662][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.909458][ T50] team0 (unregistering): Port device team_slave_1 removed [ 393.923279][ T50] team0 (unregistering): Port device team_slave_0 removed [ 393.976671][ T3860] smc: removing ib device syU× [ 394.009877][ T9530] team0: Port device team_slave_0 added [ 394.028213][ T9530] team0: Port device team_slave_1 added [ 394.045293][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.052267][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.078725][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.092705][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.099816][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.126147][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.168307][ T9530] hsr_slave_0: entered promiscuous mode [ 394.175284][ T9530] hsr_slave_1: entered promiscuous mode [ 394.181510][ T9530] debugfs: 'hsr0' already exists in 'hsr' [ 394.187553][ T9530] Cannot create hsr debugfs directory [ 394.311268][ T9530] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 394.320336][ T9530] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 394.329286][ T9530] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.338832][ T9530] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 394.417101][ T9617] tipc: Enabling of bearer rejected, failed to enable media [ 394.460789][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.595086][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.633340][ T9530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.819085][ T9530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.836341][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.843495][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.859306][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.866457][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.338706][ T9530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.389027][ T9664] loop5: detected capacity change from 0 to 512 [ 395.673286][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 396.268327][ T9664] EXT4-fs: Ignoring removed i_version option [ 396.274657][ T9664] EXT4-fs: Ignoring removed bh option [ 396.294779][ T9664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.307879][ T9664] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.719947][ T9530] veth0_vlan: entered promiscuous mode [ 397.736062][ T9530] veth1_vlan: entered promiscuous mode [ 397.766848][ T9530] veth0_macvtap: entered promiscuous mode [ 397.782102][ T9530] veth1_macvtap: entered promiscuous mode [ 397.798382][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.820650][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.847617][ T3827] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.871169][ T3827] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.923992][ T3827] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.952408][ T3827] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.252890][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.373365][ T9775] Set syz1 is full, maxelem 2 reached [ 400.379228][ T9774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9774 comm=syz.3.1450 [ 401.512700][ T9785] loop3: detected capacity change from 0 to 128 [ 401.549330][ T9785] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.564478][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.571922][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.574775][ T9785] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.623537][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.644810][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.656093][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.744989][ T3635] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.756262][ T3635] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.768723][ T3635] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.777998][ T3635] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.929277][ T28] audit: type=1400 audit(1773108688.672:1316): avc: denied { setattr } for pid=9791 comm="syz.1.1466" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 402.034916][ T9799] loop7: detected capacity change from 0 to 256 [ 402.069083][ T9799] FAT-fs (loop7): Directory bread(block 64) failed [ 402.075820][ T9799] FAT-fs (loop7): Directory bread(block 65) failed [ 402.082544][ T9799] FAT-fs (loop7): Directory bread(block 66) failed [ 402.089266][ T9799] FAT-fs (loop7): Directory bread(block 67) failed [ 402.096022][ T9799] FAT-fs (loop7): Directory bread(block 68) failed [ 402.102634][ T9799] FAT-fs (loop7): Directory bread(block 69) failed [ 402.109316][ T9799] FAT-fs (loop7): Directory bread(block 70) failed [ 402.115933][ T9799] FAT-fs (loop7): Directory bread(block 71) failed [ 402.122491][ T9799] FAT-fs (loop7): Directory bread(block 72) failed [ 402.129112][ T9799] FAT-fs (loop7): Directory bread(block 73) failed [ 403.830457][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1456'. [ 404.404947][ T9824] loop5: detected capacity change from 0 to 1024 [ 404.461636][ T9824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.491088][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.642507][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.680926][ T9857] syzkaller0: entered promiscuous mode [ 407.686641][ T9857] syzkaller0: entered allmulticast mode [ 409.012477][ T9898] loop7: detected capacity change from 0 to 4096 [ 409.049460][ T9898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.067583][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.167919][ T9910] netlink: 'syz.7.1478': attribute type 21 has an invalid length. [ 409.188202][ T9910] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1478'. [ 409.417606][ T9917] wireguard0: entered promiscuous mode [ 409.423189][ T9917] wireguard0: entered allmulticast mode [ 410.800867][ T9947] tipc: Enabled bearer , priority 0 [ 410.808173][ T9947] syzkaller0: entered promiscuous mode [ 410.813678][ T9947] syzkaller0: entered allmulticast mode [ 410.870138][ T9947] tipc: Resetting bearer [ 410.883790][ T9946] tipc: Resetting bearer [ 410.897828][ T9946] tipc: Disabling bearer [ 410.986176][ T9955] loop3: detected capacity change from 0 to 128 [ 411.014145][ T9955] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.043982][ T9955] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.256024][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.617471][ T9966] loop1: detected capacity change from 0 to 128 [ 411.636946][ T9966] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.649331][ T9966] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.871383][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.919303][ T28] audit: type=1326 audit(1773108698.662:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 411.943994][ T28] audit: type=1326 audit(1773108698.662:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 411.968017][ T28] audit: type=1326 audit(1773108698.682:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 411.991789][ T28] audit: type=1326 audit(1773108698.682:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 412.015511][ T28] audit: type=1326 audit(1773108698.702:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 412.047063][ T28] audit: type=1326 audit(1773108698.702:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 412.070941][ T28] audit: type=1326 audit(1773108698.702:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 412.094731][ T28] audit: type=1326 audit(1773108698.702:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 412.118400][ T28] audit: type=1326 audit(1773108698.702:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 412.142426][ T28] audit: type=1326 audit(1773108698.702:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.2.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 412.195640][ T9978] 9p: Bad value for 'rfdno' [ 412.366679][ T9986] loop7: detected capacity change from 0 to 256 [ 413.162242][ T9990] xt_CT: No such helper "snmp_trap" [ 413.514580][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.276436][ T9999] loop3: detected capacity change from 0 to 4096 [ 414.523586][ T9999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.604880][ T9996] loop7: detected capacity change from 0 to 4096 [ 414.655686][ T9996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.688394][ T9996] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: block 80: comm syz.7.1514: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 414.710361][ T9996] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #12: comm syz.7.1514: directory missing '..' [ 414.768265][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.796676][ T9999] netlink: 'syz.3.1504': attribute type 21 has an invalid length. [ 414.805217][ T9999] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1504'. [ 414.934839][T10009] wireguard0: entered promiscuous mode [ 414.973339][T10009] wireguard0: entered allmulticast mode [ 415.075175][T10015] loop1: detected capacity change from 0 to 128 [ 415.101392][T10015] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.114104][T10015] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.432729][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.579963][T10027] loop3: detected capacity change from 0 to 128 [ 415.847396][T10027] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.874648][T10027] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.956377][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.221589][T10042] loop1: detected capacity change from 0 to 128 [ 416.281240][T10042] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.306115][T10042] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.457764][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.126517][T10053] xt_CT: No such helper "snmp_trap" [ 417.367208][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 418.773152][T10092] tipc: Enabling of bearer rejected, failed to enable media [ 418.985471][T10097] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.608439][ T3402] IPVS: starting estimator thread 0... [ 419.703957][T10107] IPVS: using max 2304 ests per chain, 115200 per kthread [ 419.998519][T10115] 9p: Bad value for 'rfdno' [ 420.003868][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 420.003883][ T28] audit: type=1400 audit(1773108706.742:1366): avc: denied { read } for pid=10114 comm="syz.7.1531" dev="sockfs" ino=39737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.053541][T10115] debugfs: 'ttyS3' already exists in 'caif_serial' [ 421.084018][ T3624] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.096705][ T3624] Bluetooth: hci0: Frame reassembly failed (-84) [ 422.121831][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1541'. [ 422.137602][T10170] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 422.271714][T10178] loop7: detected capacity change from 0 to 512 [ 422.423413][T10178] EXT4-fs (loop7): 1 truncate cleaned up [ 422.447343][T10178] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.230374][ T3745] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.273974][T10185] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 348: padding at end of block bitmap is not set [ 424.152530][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.212694][T10209] loop7: detected capacity change from 0 to 128 [ 424.230289][T10209] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.242694][T10209] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.345603][T10214] loop5: detected capacity change from 0 to 128 [ 424.503975][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 424.516365][T10217] vlan2: entered promiscuous mode [ 424.522697][T10217] bridge0: entered promiscuous mode [ 425.596693][ T9530] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.609529][T10239] loop1: detected capacity change from 0 to 512 [ 425.831893][T10239] EXT4-fs (loop1): 1 truncate cleaned up [ 425.849693][T10239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.716246][T10248] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 348: padding at end of block bitmap is not set [ 427.074026][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.544251][T10292] xt_CT: No such helper "snmp_trap" [ 428.685972][T10298] loop5: detected capacity change from 0 to 512 [ 428.779546][T10298] EXT4-fs (loop5): 1 truncate cleaned up [ 428.795659][T10298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.964996][T10288] infiniband syz2: set down [ 428.969812][T10288] infiniband syz2: added bond_slave_1 [ 429.590929][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.658917][T10288] RDS/IB: syz2: added [ 429.663400][T10288] smc: adding ib device syz2 with port count 1 [ 429.669893][T10288] smc: ib device syz2 port 1 has no pnetid [ 429.978949][T10316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.482271][T10327] tipc: Enabling of bearer rejected, failed to enable media [ 430.532155][T10331] tipc: Enabling of bearer rejected, failed to enable media [ 430.641867][T10333] netlink: 'syz.2.1593': attribute type 13 has an invalid length. [ 432.410857][T10354] xt_CT: No such helper "snmp_trap" [ 433.529257][T10373] loop5: detected capacity change from 0 to 512 [ 433.857009][T10381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1607'. [ 434.195572][T10373] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1602: invalid indirect mapped block 256 (level 2) [ 434.236879][T10373] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 434.238005][T10373] EXT4-fs (loop5): 2 truncates cleaned up [ 434.247294][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 434.247309][ C0] EXT4-fs (loop5): initial error at time 1773108976: ext4_free_branches:1023: inode 11 [ 434.247350][ C0] EXT4-fs (loop5): last error at time 1773108976: ext4_free_branches:1023: inode 11 [ 434.294861][T10373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.375210][ T28] audit: type=1400 audit(1773108977.112:1367): avc: denied { mounton } for pid=10368 comm="syz.5.1602" path="/279/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.403442][T10386] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 434.854422][T10403] loop1: detected capacity change from 0 to 128 [ 436.439774][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.612165][T10432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10432 comm=syz.7.1621 [ 437.311230][T10425] blktrace: Concurrent blktraces are not allowed on loop4 [ 438.311782][T10437] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 438.844748][T10446] netlink: 'syz.3.1626': attribute type 6 has an invalid length. [ 439.496883][T10450] loop7: detected capacity change from 0 to 2048 [ 439.538408][T10450] ext3: Unknown parameter 'subj_role' [ 440.299660][T10465] loop5: detected capacity change from 0 to 1024 [ 440.520867][T10465] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 440.587348][T10480] loop7: detected capacity change from 0 to 1024 [ 440.720034][T10465] System zones: 0-1, 3-8 [ 440.734409][T10480] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.009842][T10465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 441.037371][T10493] loop1: detected capacity change from 0 to 512 [ 441.146538][T10493] ext4: Unknown parameter 'auto_d‚' [ 441.209650][T10465] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.360626][T10480] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1635: Allocating blocks 497-513 which overlap fs metadata [ 441.389027][T10480] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.1635: Allocating blocks 497-513 which overlap fs metadata [ 441.456442][T10477] EXT4-fs (loop7): pa ffff888100683310: logic 48, phys. 177, len 21 [ 441.464571][T10477] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 441.499412][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.537046][T10499] tipc: Started in network mode [ 441.542035][T10499] tipc: Node identity aa03c57f601c, cluster identity 4711 [ 441.549517][T10499] tipc: Enabled bearer , priority 0 [ 441.556895][T10499] syzkaller0: entered promiscuous mode [ 441.562653][T10499] syzkaller0: entered allmulticast mode [ 441.571651][T10499] tipc: Resetting bearer [ 441.578531][T10499] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1640' sets config #1 [ 441.588526][T10498] tipc: Resetting bearer [ 441.597653][T10498] tipc: Disabling bearer [ 441.621162][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 441.671568][ T28] audit: type=1326 audit(1773108984.412:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.706730][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 441.720004][ T28] audit: type=1326 audit(1773108984.452:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.749329][ T28] audit: type=1326 audit(1773108984.452:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.775743][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 441.784735][ T28] audit: type=1326 audit(1773108984.452:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.810407][ T28] audit: type=1326 audit(1773108984.452:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.836196][ T28] audit: type=1326 audit(1773108984.452:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.862908][ T28] audit: type=1326 audit(1773108984.452:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.919742][ T28] audit: type=1326 audit(1773108984.452:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.943897][T10511] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 441.951878][ T28] audit: type=1326 audit(1773108984.452:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 441.975631][ T28] audit: type=1326 audit(1773108984.452:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1ec45c799 code=0x7ffc0000 [ 442.021739][T10511] bond3: (slave gretap1): making interface the new active one [ 442.030128][T10511] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 443.208633][T10529] cgroup: fork rejected by pids controller in /syz7 [ 443.343433][T11067] syzkaller0: entered promiscuous mode [ 443.349125][T11067] syzkaller0: entered allmulticast mode [ 443.359002][T11067] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 443.552698][T11077] loop7: detected capacity change from 0 to 128 [ 443.590686][T11077] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.609455][T11077] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.636215][T10491] loop1: detected capacity change from 0 to 8192 [ 443.751475][T10491] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 443.901057][T11089] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 444.078489][T11098] loop5: detected capacity change from 0 to 128 [ 444.108743][T11098] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 444.717984][T11101] loop1: detected capacity change from 0 to 512 [ 444.963163][T11098] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.012042][T11101] EXT4-fs (loop1): 1 orphan inode deleted [ 445.018728][T11101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.032766][ T3837] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:27: Failed to release dquot type 1 [ 445.045001][T11101] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.111351][ T9530] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.055155][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.208370][T11117] loop7: detected capacity change from 0 to 512 [ 446.228172][T11117] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 446.656240][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.719572][T11127] xt_CT: No such helper "snmp_trap" [ 446.928950][T11131] loop7: detected capacity change from 0 to 512 [ 446.999827][T11131] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1670: invalid indirect mapped block 256 (level 2) [ 447.023967][T11131] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 447.028302][T11131] EXT4-fs (loop7): 2 truncates cleaned up [ 447.038301][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 447.038400][ C0] EXT4-fs (loop7): initial error at time 1773108989: ext4_free_branches:1023: inode 11 [ 447.038645][ C0] EXT4-fs (loop7): last error at time 1773108989: ext4_free_branches:1023: inode 11 [ 447.120199][T11131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.413002][T11133] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 447.894364][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.917574][T11143] loop5: detected capacity change from 0 to 128 [ 448.038197][T11143] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.162650][T11143] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.399496][T11164] loop1: detected capacity change from 0 to 128 [ 448.437315][T11164] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.449999][T11164] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.817852][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.827905][T11173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.839768][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 448.839818][ T28] audit: type=1400 audit(1773108991.583:1383): avc: denied { map } for pid=11167 comm="syz.7.1683" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 449.291376][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.256907][T11201] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1693'. [ 450.566829][T11206] blktrace: Concurrent blktraces are not allowed on loop14 [ 450.741345][T11208] loop1: detected capacity change from 0 to 128 [ 450.917837][T11198] cgroup: fork rejected by pids controller in /syz3 [ 450.974565][T11208] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.209462][T11208] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.421414][T11577] loop5: detected capacity change from 0 to 128 [ 451.654434][T11577] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.792980][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.815061][T11577] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.258739][ T3669] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.304049][T11594] loop7: detected capacity change from 0 to 128 [ 452.329177][T11594] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.354563][T11594] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.471319][T11590] loop1: detected capacity change from 0 to 512 [ 452.518114][T11590] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 453.187562][ T9530] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.775039][T11618] xt_CT: No such helper "snmp_trap" [ 454.067252][T11621] tipc: Enabling of bearer rejected, failed to enable media [ 454.103145][T11612] loop1: detected capacity change from 0 to 8192 [ 454.124774][T11612] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.182051][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.212917][T11612] FAT-fs (loop1): Filesystem has been set read-only [ 454.325691][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.345048][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.470811][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.494264][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.519325][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1717'. [ 454.542408][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.551295][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.675630][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.694123][T11640] loop7: detected capacity change from 0 to 1024 [ 454.701436][T11612] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.718881][T11627] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 454.731913][T11640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.802522][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 455.147481][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 455.178740][ T28] audit: type=1400 audit(1773109253.916:1384): avc: denied { bind } for pid=11649 comm="syz.2.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.202159][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 455.202200][ T3320] Tainted: [W]=WARN [ 455.202209][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.202234][ T3320] Call Trace: [ 455.202243][ T3320] [ 455.202251][ T3320] __dump_stack+0x1d/0x30 [ 455.202316][ T3320] dump_stack_lvl+0x95/0xd0 [ 455.202346][ T3320] dump_stack+0x15/0x1b [ 455.202374][ T3320] dump_header+0x80/0x240 [ 455.202459][ T3320] oom_kill_process+0x295/0x350 [ 455.202482][ T3320] out_of_memory+0x97d/0xb80 [ 455.202506][ T3320] try_charge_memcg+0x62e/0xa10 [ 455.202638][ T3320] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 455.202737][ T3320] __swap_cache_prepare_and_add+0x386/0x530 [ 455.202807][ T3320] swap_cache_alloc_folio+0xa2/0x120 [ 455.202845][ T3320] swap_cluster_readahead+0x26e/0x3d0 [ 455.202926][ T3320] swapin_readahead+0xde/0x840 [ 455.202963][ T3320] ? __rcu_read_unlock+0x4e/0x70 [ 455.202989][ T3320] ? __perf_event_task_sched_in+0xa65/0xad0 [ 455.203024][ T3320] ? __list_add_valid_or_report+0x38/0xe0 [ 455.203112][ T3320] ? xfd_validate_state+0x45/0xf0 [ 455.203158][ T3320] ? __rcu_read_unlock+0x4e/0x70 [ 455.203188][ T3320] ? swap_cache_get_folio+0x26f/0x280 [ 455.203222][ T3320] do_swap_page+0x30d/0x2220 [ 455.203302][ T3320] ? __schedule+0x93c/0xd40 [ 455.203332][ T3320] ? __rcu_read_lock+0x36/0x50 [ 455.203423][ T3320] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 455.203481][ T3320] handle_mm_fault+0xb40/0x3020 [ 455.203524][ T3320] ? vma_start_read+0x1c7/0x2c0 [ 455.203561][ T3320] do_user_addr_fault+0x62f/0x1050 [ 455.203632][ T3320] ? trace_page_fault_user+0x1f/0xe0 [ 455.203673][ T3320] exc_page_fault+0x62/0xa0 [ 455.203775][ T3320] asm_exc_page_fault+0x26/0x30 [ 455.203808][ T3320] RIP: 0033:0x7fe9bc6a7917 [ 455.203829][ T3320] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 455.203851][ T3320] RSP: 002b:00007ffcaf104dc0 EFLAGS: 00010202 [ 455.203926][ T3320] RAX: 0000000000000000 RBX: 0000555591202500 RCX: 00007fe9bc6a7917 [ 455.203943][ T3320] RDX: 00007ffcaf104e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.203974][ T3320] RBP: 00007ffcaf104e6c R08: 0000000000000000 R09: 0000000000000000 [ 455.203988][ T3320] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 455.204069][ T3320] R13: 00000000000927c0 R14: 000000000006efd2 R15: 00007ffcaf104ec0 [ 455.204095][ T3320] [ 455.463770][T11652] loop5: detected capacity change from 0 to 1024 [ 455.470524][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 4231 [ 455.478055][ T3320] memory+swap: usage 308220kB, limit 9007199254740988kB, failcnt 0 [ 455.486164][ T3320] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 455.501753][ T3320] Memory cgroup stats for /syz3: [ 455.501968][ T3320] cache 0 [ 455.531039][ T3320] rss 4096 [ 455.534276][ T3320] shmem 0 [ 455.539324][ T3320] mapped_file 0 [ 455.548516][T11652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 455.557135][ T3320] dirty 0 [ 455.570332][ T3320] writeback 16384 [ 455.574357][ T3320] workingset_refault_anon 1041 [ 455.579230][ T3320] workingset_refault_file 6467 [ 455.584290][ T3320] swap 1044480 [ 455.587680][ T3320] swapcached 18841600 [ 455.591689][ T3320] pgpgin 496449 [ 455.598300][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.604613][T11650] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 455.609096][ T3320] pgpgout 496441 [ 455.631271][T11652] System zones: 0-1, 3-12 [ 455.643585][ T3320] pgfault 463506 [ 455.647210][ T3320] pgmajfault 234 [ 455.650832][ T3320] inactive_anon 16384 [ 455.655136][ T3320] active_anon 12288 [ 455.659018][ T3320] inactive_file 0 [ 455.662848][ T3320] active_file 4096 [ 455.666620][ T3320] unevictable 0 [ 455.670151][ T3320] hierarchical_memory_limit 314572800 [ 455.675600][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 455.681794][ T3320] total_cache 0 [ 455.685337][ T3320] total_rss 4096 [ 455.688925][ T3320] total_shmem 0 [ 455.692459][ T3320] total_mapped_file 0 [ 455.696925][ T3320] total_dirty 0 [ 455.700427][ T3320] total_writeback 16384 [ 455.704683][ T3320] total_workingset_refault_anon 1041 [ 455.710000][ T3320] total_workingset_refault_file 6467 [ 455.715376][ T3320] total_swap 1044480 [ 455.719286][ T3320] total_swapcached 18841600 [ 455.723877][ T3320] total_pgpgin 496449 [ 455.727931][ T3320] total_pgpgout 496441 [ 455.732017][ T3320] total_pgfault 463506 [ 455.736132][ T3320] total_pgmajfault 234 [ 455.740290][ T3320] total_inactive_anon 16384 [ 455.744846][ T3320] total_active_anon 12288 [ 455.749187][ T3320] total_inactive_file 0 [ 455.753427][ T3320] total_active_file 4096 [ 455.757801][ T3320] total_unevictable 0 [ 455.761798][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.558,pid=5896,uid=0 [ 455.776486][ T3320] Memory cgroup out of memory: Killed process 5896 (syz.3.558) total-vm:96340kB, anon-rss:1228kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 455.801139][T11633] syz.3.1718 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 455.818908][T11633] CPU: 1 UID: 0 PID: 11633 Comm: syz.3.1718 Tainted: G W syzkaller #0 PREEMPT(full) [ 455.818948][T11633] Tainted: [W]=WARN [ 455.818969][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.818984][T11633] Call Trace: [ 455.818991][T11633] [ 455.819000][T11633] __dump_stack+0x1d/0x30 [ 455.819055][T11633] dump_stack_lvl+0x95/0xd0 [ 455.819078][T11633] dump_stack+0x15/0x1b [ 455.819173][T11633] dump_header+0x80/0x240 [ 455.819195][T11633] oom_kill_process+0x295/0x350 [ 455.819219][T11633] out_of_memory+0x97d/0xb80 [ 455.819248][T11633] try_charge_memcg+0x62e/0xa10 [ 455.819375][T11633] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 455.819411][T11633] __swap_cache_prepare_and_add+0x386/0x530 [ 455.819457][T11633] swap_cache_alloc_folio+0xa2/0x120 [ 455.819562][T11633] swap_cluster_readahead+0x26e/0x3d0 [ 455.819606][T11633] swapin_readahead+0xde/0x840 [ 455.819682][T11633] ? _raw_spin_unlock+0x9/0x30 [ 455.819709][T11633] ? swap_put_entries_cluster+0x385/0x3a0 [ 455.819749][T11633] ? swap_put_entries_cluster+0x111/0x3a0 [ 455.819789][T11633] ? __rcu_read_unlock+0x4e/0x70 [ 455.819857][T11633] ? swap_cache_get_folio+0x26f/0x280 [ 455.819895][T11633] do_swap_page+0x30d/0x2220 [ 455.819934][T11633] ? css_rstat_updated+0xbb/0x280 [ 455.819987][T11633] ? __rcu_read_lock+0x36/0x50 [ 455.820053][T11633] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 455.820086][T11633] handle_mm_fault+0xb40/0x3020 [ 455.820136][T11633] ? vma_start_read+0x1c7/0x2c0 [ 455.820222][T11633] do_user_addr_fault+0x62f/0x1050 [ 455.820254][T11633] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 455.820310][T11633] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 455.820484][T11633] ? trace_page_fault_user+0x1f/0xe0 [ 455.820528][T11633] exc_page_fault+0x62/0xa0 [ 455.820559][T11633] asm_exc_page_fault+0x26/0x30 [ 455.820585][T11633] RIP: 0033:0x7fe9bc6a78f8 [ 455.820634][T11633] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 455.820654][T11633] RSP: 002b:00007ffcaf104bb0 EFLAGS: 00010246 [ 455.820671][T11633] RAX: 0000000000000000 RBX: 0000555591202500 RCX: 00007fe9bc6acfce [ 455.820688][T11633] RDX: 00007ffcaf104c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.820702][T11633] RBP: 00007fe9bc967da0 R08: 0000000000000000 R09: 0000000000000000 [ 455.820717][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006f2a6 [ 455.820729][T11633] R13: 00007fe9bc96609c R14: 000000000006efe6 R15: 00007fe9bc966090 [ 455.820758][T11633] [ 455.822022][T11633] memory: usage 307168kB, limit 307200kB, failcnt 4245 [ 455.843209][T11652] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.852168][T11633] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 456.068805][T11663] loop7: detected capacity change from 0 to 512 [ 456.103027][T11633] kmem: usage 307024kB, limit 9007199254740988kB, failcnt 0 [ 456.133740][T11663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.142452][T11633] Memory cgroup stats for /syz3: [ 456.146514][T11633] cache 40960 [ 456.146577][T11663] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.151515][T11633] rss 4096 [ 456.151525][T11633] shmem 0 [ 456.171306][T11633] mapped_file 40960 [ 456.175197][T11633] dirty 0 [ 456.178213][T11633] writeback 0 [ 456.181544][T11633] workingset_refault_anon 1044 [ 456.186404][T11633] workingset_refault_file 6488 [ 456.191196][T11633] swap 413696 [ 456.194609][T11633] swapcached 18841600 [ 456.198609][T11633] pgpgin 496473 [ 456.202269][T11633] pgpgout 496458 [ 456.205837][T11633] pgfault 463511 [ 456.209403][T11633] pgmajfault 238 [ 456.213018][T11633] inactive_anon 16384 [ 456.217117][T11633] active_anon 0 [ 456.220676][T11633] inactive_file 45056 [ 456.224783][T11633] active_file 0 [ 456.228283][T11633] unevictable 0 [ 456.231757][T11633] hierarchical_memory_limit 314572800 [ 456.237186][T11633] hierarchical_memsw_limit 9223372036854771712 [ 456.243375][T11633] total_cache 40960 [ 456.247267][T11633] total_rss 4096 [ 456.250825][T11633] total_shmem 0 [ 456.254357][T11633] total_mapped_file 40960 [ 456.258702][T11633] total_dirty 0 [ 456.264704][ T28] audit: type=1326 audit(1773109255.006:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.289539][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1725'. [ 456.300958][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1725'. [ 456.320157][ T28] audit: type=1326 audit(1773109255.036:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.344755][ T28] audit: type=1326 audit(1773109255.036:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.377287][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.387153][ T28] audit: type=1326 audit(1773109255.036:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.411147][T11633] total_writeback 0 [ 456.415073][ T28] audit: type=1326 audit(1773109255.036:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.438804][T11633] total_workingset_refault_anon 1044 [ 456.480365][T11633] total_workingset_refault_file 6488 [ 456.485732][ T28] audit: type=1326 audit(1773109255.036:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.509309][ T28] audit: type=1326 audit(1773109255.036:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.534897][ T28] audit: type=1326 audit(1773109255.036:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.563114][T11633] total_swap 413696 [ 456.567171][ T28] audit: type=1326 audit(1773109255.036:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11662 comm="syz.7.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 456.591568][T11633] total_swapcached 18841600 [ 456.596255][T11633] total_pgpgin 496473 [ 456.600436][T11633] total_pgpgout 496458 [ 456.604857][T11633] total_pgfault 463511 [ 456.610015][T11633] total_pgmajfault 238 [ 456.614561][T11633] total_inactive_anon 16384 [ 456.620268][T11633] total_active_anon 0 [ 456.625369][T11633] total_inactive_file 45056 [ 456.630997][T11633] total_active_file 0 [ 456.636139][T11633] total_unevictable 0 [ 456.641221][T11633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1718,pid=11633,uid=0 [ 456.660642][T11633] Memory cgroup out of memory: Killed process 11633 (syz.3.1718) total-vm:94160kB, anon-rss:1228kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 456.904954][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 459.133363][T11717] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.143560][T11718] vlan2: entered promiscuous mode [ 459.148685][T11718] vlan2: entered allmulticast mode [ 459.154096][T11718] hsr_slave_1: entered allmulticast mode [ 459.169344][T11714] loop1: detected capacity change from 0 to 1024 [ 459.186565][T11714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.200821][T11714] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1737'. [ 459.239526][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 459.434371][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1742'. [ 459.503861][T11733] loop7: detected capacity change from 0 to 8192 [ 459.521430][T11733] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.534106][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.543577][T11733] FAT-fs (loop7): Filesystem has been set read-only [ 459.550292][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.560786][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.569932][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.579592][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.588992][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.597975][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.606970][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.616880][T11733] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.626617][T11735] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 459.714095][T11727] cgroup: fork rejected by pids controller in /syz2 [ 459.750711][T11738] loop7: detected capacity change from 0 to 128 [ 459.790691][T11738] 9pnet_virtio: no channels available for device syz [ 459.803198][T11738] netlink: 'syz.7.1745': attribute type 10 has an invalid length. [ 459.862860][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.907868][T11738] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 460.480125][T13541] IPv6: NLM_F_CREATE should be specified when creating new route [ 461.317591][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1755'. [ 461.323309][T13554] vlan0: entered promiscuous mode [ 461.331843][T13554] vlan0: entered allmulticast mode [ 461.337339][T13554] hsr_slave_1: entered allmulticast mode [ 461.383729][T13550] bridge_slave_1: left allmulticast mode [ 461.390667][T13550] bridge_slave_1: left promiscuous mode [ 461.400904][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 461.420810][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.445892][T13550] bridge_slave_0: left allmulticast mode [ 461.463702][T13550] bridge_slave_0: left promiscuous mode [ 461.474128][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.641672][T13562] xt_CT: No such helper "snmp_trap" [ 461.815239][T13567] loop1: detected capacity change from 0 to 128 [ 461.937583][T13567] 9pnet_virtio: no channels available for device syz [ 461.976169][T13567] netlink: 'syz.1.1760': attribute type 10 has an invalid length. [ 462.057482][T13573] loop1: detected capacity change from 0 to 1024 [ 462.085907][T13573] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 462.094310][T13573] System zones: 0-1, 3-12 [ 462.099584][T13573] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.285329][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 462.285346][ T28] audit: type=1400 audit(1773109261.026:1400): avc: denied { write } for pid=13577 comm="syz.7.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 462.318836][ T28] audit: type=1400 audit(1773109261.056:1401): avc: denied { bind } for pid=13577 comm="syz.7.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 462.689076][T13586] loop7: detected capacity change from 0 to 512 [ 462.881036][T13586] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1765: iget: bad i_size value: 38620345925642 [ 462.893954][T13586] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 462.894887][T13586] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1765: couldn't read orphan inode 15 (err -117) [ 462.904064][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 462.904079][ C1] EXT4-fs (loop7): initial error at time 1773109261: ext4_orphan_get:1391: inode 15 [ 462.904107][ C1] EXT4-fs (loop7): last error at time 1773109261: ext4_orphan_get:1391: inode 15 [ 462.941113][T13586] loop7: lost filesystem error report for type 5 error -117 [ 462.942877][T13586] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.214218][T13589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1768'. [ 463.356025][ T3627] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:11: bg 0: block 5: invalid block bitmap [ 463.372008][ T3627] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 463.384519][ T3627] EXT4-fs (loop7): This should not happen!! Data will be lost [ 463.384519][ T3627] [ 463.394458][ T3627] EXT4-fs (loop7): Total free blocks count 0 [ 463.400478][ T3627] EXT4-fs (loop7): Free/Dirty block details [ 464.002329][ T3627] EXT4-fs (loop7): free_blocks=0 [ 464.008535][ T3627] EXT4-fs (loop7): dirty_blocks=202 [ 464.015863][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 464.025386][ T3627] EXT4-fs (loop7): Block reservation details [ 464.031632][ T3627] EXT4-fs (loop7): i_reserved_data_blocks=202 [ 464.040591][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 464.107646][T13643] loop1: detected capacity change from 0 to 512 [ 464.166870][T13666] loop7: detected capacity change from 0 to 512 [ 464.197607][T13666] EXT4-fs (loop7): 1 orphan inode deleted [ 464.206160][T13666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.334789][T13643] EXT4-fs (loop1): too many log groups per flexible block group [ 464.441775][T13643] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 464.448906][T13643] EXT4-fs (loop1): mount failed [ 464.563966][T13680] loop1: detected capacity change from 0 to 512 [ 464.603468][T13680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.626449][T13680] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.654532][T13680] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1776: iget: bad i_size value: 2533274857506816 [ 464.681073][T13680] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1776: iget: bad i_size value: 2533274857506816 [ 464.707195][T13680] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1776: iget: bad i_size value: 2533274857506816 [ 464.734650][T13680] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1776: iget: bad i_size value: 2533274857506816 [ 464.764789][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.985660][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.262627][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1779'. [ 465.507313][T13698] netlink: 'syz.3.1783': attribute type 10 has an invalid length. [ 466.196605][T13718] loop7: detected capacity change from 0 to 1024 [ 466.219116][T13718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 466.231270][T13718] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.085548][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 467.131662][T13786] loop7: detected capacity change from 0 to 128 [ 467.144709][T13786] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.163478][T13786] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.474061][T13804] IPVS: stopping backup sync thread 7234 ... [ 467.501971][T13806] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1794'. [ 467.512097][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1794'. [ 468.011266][ T9530] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.340737][T13815] loop1: detected capacity change from 0 to 2048 [ 468.470643][T13815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.483534][T13818] loop5: detected capacity change from 0 to 128 [ 468.560181][T13818] 9pnet_virtio: no channels available for device syz [ 468.569995][T13818] netlink: 'syz.5.1795': attribute type 10 has an invalid length. [ 468.584314][T13815] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1796: bg 0: block 234: padding at end of block bitmap is not set [ 468.599044][T13815] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 710 with error 28 [ 468.679471][T13815] EXT4-fs (loop1): This should not happen!! Data will be lost [ 468.679471][T13815] [ 468.690174][T13815] EXT4-fs (loop1): Total free blocks count 0 [ 468.742648][T13815] EXT4-fs (loop1): Free/Dirty block details [ 468.778722][T13815] EXT4-fs (loop1): free_blocks=0 [ 468.803992][T13815] EXT4-fs (loop1): dirty_blocks=720 [ 468.824715][T13815] EXT4-fs (loop1): Block reservation details [ 468.857178][T13815] EXT4-fs (loop1): i_reserved_data_blocks=45 [ 469.136111][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.340117][T13856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1804'. [ 470.046447][T13918] loop5: detected capacity change from 0 to 512 [ 470.217112][T13918] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1808: iget: bad i_size value: 38620345925642 [ 470.229871][T13918] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 470.232268][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 470.247861][ C1] EXT4-fs (loop5): initial error at time 1773109268: ext4_orphan_get:1391: inode 15 [ 470.257287][ C1] EXT4-fs (loop5): last error at time 1773109268: ext4_orphan_get:1391: inode 15 [ 470.296877][T13918] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1808: couldn't read orphan inode 15 (err -117) [ 470.308917][T13918] loop5: lost filesystem error report for type 5 error -117 [ 470.317863][T13918] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.560875][T13923] netlink: 'syz.2.1809': attribute type 10 has an invalid length. [ 470.568949][T13923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1809'. [ 470.590659][T13923] dummy0: entered promiscuous mode [ 470.596193][T13923] dummy0: entered allmulticast mode [ 470.602703][T13923] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 470.701781][ T3852] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:31: bg 0: block 5: invalid block bitmap [ 470.716065][ T3852] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 202 with error 28 [ 470.728636][ T3852] EXT4-fs (loop5): This should not happen!! Data will be lost [ 470.728636][ T3852] [ 470.738363][ T3852] EXT4-fs (loop5): Total free blocks count 0 [ 470.744446][ T3852] EXT4-fs (loop5): Free/Dirty block details [ 470.750433][ T3852] EXT4-fs (loop5): free_blocks=0 [ 470.755480][ T3852] EXT4-fs (loop5): dirty_blocks=202 [ 470.760746][ T3852] EXT4-fs (loop5): Block reservation details [ 470.766883][ T3852] EXT4-fs (loop5): i_reserved_data_blocks=202 [ 470.774942][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 472.156032][T13964] loop7: detected capacity change from 0 to 128 [ 472.183011][T13964] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.195649][T13964] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.884135][ T9530] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.397412][T13977] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1821'. [ 473.564806][T13984] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1821'. [ 476.160552][T14086] loop7: detected capacity change from 0 to 128 [ 476.185155][T14086] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.219986][T14086] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.786976][T14105] loop5: detected capacity change from 0 to 128 [ 476.951191][T14068] 9pnet_virtio: no channels available for device syz [ 476.975709][T14068] netlink: 'syz.5.1829': attribute type 10 has an invalid length. [ 477.043900][ T9530] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.996188][T14147] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.017605][ T4236] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 478.063775][T14147] loop5: detected capacity change from 0 to 4096 [ 478.093367][ T4236] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.123298][T14147] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 478.200118][T14146] rtc_cmos 00:00: Alarms can be up to one day in the future [ 478.287399][ T4236] rtc_cmos 00:00: Alarms can be up to one day in the future [ 478.297537][ T4236] rtc_cmos 00:00: Alarms can be up to one day in the future [ 478.305369][ T4236] rtc_cmos 00:00: Alarms can be up to one day in the future [ 478.313120][ T4236] rtc_cmos 00:00: Alarms can be up to one day in the future [ 478.320558][ T4236] rtc rtc0: __rtc_set_alarm: err=-22 [ 479.362303][ T28] audit: type=1400 audit(1773109534.141:1402): avc: denied { mount } for pid=14164 comm="syz.5.1840" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 480.326819][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1839'. [ 481.131318][T14173] loop7: detected capacity change from 0 to 512 [ 481.182805][T14173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.195533][T14173] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.211824][T14173] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1843: iget: bad i_size value: 2533274857506816 [ 481.231006][T14173] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1843: iget: bad i_size value: 2533274857506816 [ 481.250532][T14173] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1843: iget: bad i_size value: 2533274857506816 [ 481.264284][T14173] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1843: iget: bad i_size value: 2533274857506816 [ 481.378396][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.428262][T14181] loop5: detected capacity change from 0 to 256 [ 481.646063][ T28] audit: type=1400 audit(1773109536.417:1403): avc: denied { execute } for pid=14180 comm="syz.5.1845" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 481.917302][T14192] program syz.5.1845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.986276][ T28] audit: type=1400 audit(1773109536.689:1404): avc: denied { listen } for pid=14180 comm="syz.5.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 482.232805][T14195] bridge_slave_1: left allmulticast mode [ 482.239447][T14195] bridge_slave_1: left promiscuous mode [ 482.247224][T14195] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.552023][T14198] loop1: detected capacity change from 0 to 512 [ 482.960025][T14195] bridge_slave_0: left allmulticast mode [ 482.965713][T14195] bridge_slave_0: left promiscuous mode [ 482.971886][T14195] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.989269][T14198] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 482.999812][T14198] EXT4-fs (loop1): bad block size 65536 [ 484.580116][T14210] xt_CT: No such helper "snmp_trap" [ 486.345339][T14230] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1858'. [ 486.359551][T14230] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1858'. [ 487.537824][T14251] loop5: detected capacity change from 0 to 128 [ 487.577196][T14251] 9p: Could not find request transport: xen [ 488.827352][T14256] netlink: 'syz.5.1863': attribute type 10 has an invalid length. [ 488.839521][T14251] netlink: 'syz.5.1863': attribute type 10 has an invalid length. [ 488.994771][T14253] xt_CT: No such helper "snmp_trap" [ 489.558322][T14261] bridge_slave_1: left allmulticast mode [ 489.575291][T14267] loop7: detected capacity change from 0 to 128 [ 489.581959][T14261] bridge_slave_1: left promiscuous mode [ 489.589623][T14261] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.987899][T14269] xt_CT: No such helper "snmp_trap" [ 490.054919][T14261] bridge_slave_0: left allmulticast mode [ 490.118394][T14261] bridge_slave_0: left promiscuous mode [ 490.141885][T14261] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.230502][T14267] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.326069][T14267] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.352150][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1866'. [ 490.366426][T14278] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1870'. [ 490.401041][ T9530] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 490.452018][T14278] tipc: New replicast peer: 10.1.1.2 [ 490.457484][T14278] tipc: Enabled bearer , priority 10 [ 490.631536][ T28] audit: type=1400 audit(1773109545.456:1405): avc: denied { ioctl } for pid=14283 comm="syz.1.1873" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 491.310780][T14294] xt_CT: No such helper "snmp_trap" [ 491.569068][T14300] loop7: detected capacity change from 0 to 256 [ 491.598740][ T4236] tipc: Node number set to 491165765 [ 491.767191][T14304] program syz.7.1878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 491.803749][T14307] xt_hashlimit: size too large, truncated to 1048576 [ 491.853692][T14310] –: renamed from veth0_to_batadv [ 491.953460][T14314] loop7: detected capacity change from 0 to 256 [ 491.976084][T14314] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 492.108504][T14318] xt_CT: No such helper "snmp_trap" [ 493.824868][T14349] netlink: 'syz.3.1890': attribute type 10 has an invalid length. [ 493.948683][T14353] xt_CT: No such helper "snmp_trap" [ 494.030113][T14356] loop1: detected capacity change from 0 to 1024 [ 494.065283][T14356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 494.077540][T14356] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.358470][T14345] bridge_slave_1: left allmulticast mode [ 494.364842][T14345] bridge_slave_1: left promiscuous mode [ 494.384653][T14345] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.408352][T14345] bridge_slave_0: left allmulticast mode [ 494.414793][T14345] bridge_slave_0: left promiscuous mode [ 494.426135][T14345] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.687235][ T28] audit: type=1400 audit(1773109549.570:1406): avc: denied { mount } for pid=14365 comm="syz.7.1893" name="/" dev="hugetlbfs" ino=44646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 494.758267][ T28] audit: type=1400 audit(1773109549.600:1407): avc: denied { create } for pid=14365 comm="syz.7.1893" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 494.984061][ T28] audit: type=1400 audit(1773109549.620:1408): avc: denied { read } for pid=14365 comm="syz.7.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 495.073698][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 495.146676][T14369] loop1: detected capacity change from 0 to 128 [ 495.902571][T14369] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.933374][T14369] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.331166][T14397] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1902'. [ 496.340798][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1902'. [ 496.611460][T14400] xt_CT: No such helper "snmp_trap" [ 497.119403][T14408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1915'. [ 497.157591][T14390] Set syz1 is full, maxelem 65536 reached [ 497.191038][T14409] bridge_slave_1: left allmulticast mode [ 497.196734][T14409] bridge_slave_1: left promiscuous mode [ 497.204750][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.220383][T14409] bridge_slave_0: left allmulticast mode [ 497.226205][T14409] bridge_slave_0: left promiscuous mode [ 497.232729][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.488948][T14414] loop5: detected capacity change from 0 to 256 [ 497.524133][T14414] FAT-fs (loop5): Directory bread(block 64) failed [ 497.531061][T14414] FAT-fs (loop5): Directory bread(block 65) failed [ 497.538016][T14414] FAT-fs (loop5): Directory bread(block 66) failed [ 497.544722][T14414] FAT-fs (loop5): Directory bread(block 67) failed [ 497.551379][T14414] FAT-fs (loop5): Directory bread(block 68) failed [ 497.558072][T14414] FAT-fs (loop5): Directory bread(block 69) failed [ 497.564804][T14414] FAT-fs (loop5): Directory bread(block 70) failed [ 497.571563][T14414] FAT-fs (loop5): Directory bread(block 71) failed [ 497.578126][T14414] FAT-fs (loop5): Directory bread(block 72) failed [ 497.584796][T14414] FAT-fs (loop5): Directory bread(block 73) failed [ 498.535332][T14424] bond0: (slave dummy0): Releasing backup interface [ 499.823343][T14433] loop7: detected capacity change from 0 to 512 [ 499.833966][T14433] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 500.634044][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 501.368797][T14459] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1918'. [ 501.380318][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1918'. [ 501.430813][T14459] geneve2: entered promiscuous mode [ 501.714266][ T28] audit: type=1326 audit(1773109556.628:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 501.781125][ T28] audit: type=1326 audit(1773109556.628:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 501.836722][ T28] audit: type=1326 audit(1773109556.658:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 501.890744][ T28] audit: type=1326 audit(1773109556.658:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 501.937393][ T28] audit: type=1326 audit(1773109556.658:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 501.991522][ T28] audit: type=1326 audit(1773109556.658:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 502.050172][ T28] audit: type=1326 audit(1773109556.658:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 502.124904][ T28] audit: type=1326 audit(1773109556.658:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 502.174660][ T28] audit: type=1326 audit(1773109556.658:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 502.234351][ T28] audit: type=1326 audit(1773109556.658:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14463 comm="syz.7.1920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28240c799 code=0x7ffc0000 [ 502.404031][T14453] tipc: Failed to remove unknown binding: 66,0,0/132880972:2600380809/2600380810 [ 502.795743][T14474] loop7: detected capacity change from 0 to 8192 [ 502.817305][T14479] loop5: detected capacity change from 0 to 1024 [ 502.853580][T14479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 502.866060][T14479] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.877535][T14474] loop7: p1 < > p2 p4 < p5 > [ 502.891080][T14474] loop7: partition table partially beyond EOD, truncated [ 502.908448][T14474] loop7: p1 start 134217728 is beyond EOD, truncated [ 502.921238][T14474] loop7: p2 size 591360 extends beyond EOD, truncated [ 503.032476][T14474] loop7: p5 size 591360 extends beyond EOD, truncated [ 503.052566][T14487] SET target dimension over the limit! [ 503.297425][T14494] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1926'. [ 503.308056][T14494] netlink: zone id is out of range [ 504.045700][T14482] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 504.070553][T14482] EXT4-fs (loop5): Remounting filesystem read-only [ 504.255814][T14495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1925'. [ 504.294212][T14495] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1925'. [ 504.363096][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 505.410161][T14516] xt_CT: No such helper "snmp_trap" [ 505.546242][T14513] batman_adv: batadv0: Adding interface: dummy0 [ 505.566468][T14513] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.632925][T14513] batman_adv: batadv0: Interface activated: dummy0 [ 505.681460][T14525] loop5: detected capacity change from 0 to 128 [ 505.905395][T14525] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 505.918110][T14525] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.186297][T14530] tipc: Enabled bearer , priority 0 [ 506.193667][T14530] syzkaller0: entered promiscuous mode [ 506.199235][T14530] syzkaller0: entered allmulticast mode [ 506.206972][T14530] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 506.228542][T14530] tipc: Resetting bearer [ 506.235193][T14529] tipc: Resetting bearer [ 506.243735][T14529] tipc: Disabling bearer [ 506.251670][ T7446] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 506.285327][ T7446] syz_tun (unregistering): left allmulticast mode [ 506.538965][T14544] loop7: detected capacity change from 0 to 256 [ 506.613601][T14544] FAT-fs (loop7): Directory bread(block 64) failed [ 506.620388][T14544] FAT-fs (loop7): Directory bread(block 65) failed [ 506.627070][T14544] FAT-fs (loop7): Directory bread(block 66) failed [ 506.633769][T14544] FAT-fs (loop7): Directory bread(block 67) failed [ 506.640459][T14544] FAT-fs (loop7): Directory bread(block 68) failed [ 506.647255][T14544] FAT-fs (loop7): Directory bread(block 69) failed [ 506.653885][T14544] FAT-fs (loop7): Directory bread(block 70) failed [ 506.660558][T14544] FAT-fs (loop7): Directory bread(block 71) failed [ 506.667220][T14544] FAT-fs (loop7): Directory bread(block 72) failed [ 506.673897][T14544] FAT-fs (loop7): Directory bread(block 73) failed [ 507.508566][ T3627] bond0 (unregistering): Released all slaves [ 508.386272][T14546] chnl_net:caif_netlink_parms(): no params data found [ 508.725121][T14579] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1948'. [ 508.737526][ T3627] tipc: Left network mode [ 508.886510][T14584] siw: device registration error -23 [ 508.950845][T14586] loop1: detected capacity change from 0 to 128 [ 509.224054][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.242979][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.250182][T14546] bridge_slave_0: entered allmulticast mode [ 509.274558][T14546] bridge_slave_0: entered promiscuous mode [ 509.290811][ T3627] hsr_slave_0: left promiscuous mode [ 509.296645][ T3627] hsr_slave_1: left promiscuous mode [ 509.312584][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.324182][T14586] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 509.339762][ T3627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.399081][ T3627] team0 (unregistering): Port device team_slave_1 removed [ 509.419108][ T3627] team0 (unregistering): Port device team_slave_0 removed [ 509.494447][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.506377][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.514617][T14546] bridge_slave_1: entered allmulticast mode [ 509.521023][T14546] bridge_slave_1: entered promiscuous mode [ 509.540977][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.554873][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.588962][T14546] team0: Port device team_slave_0 added [ 509.605599][T14546] team0: Port device team_slave_1 added [ 509.631963][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.641306][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.683254][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.702467][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.715432][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.742493][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.776213][T14546] hsr_slave_0: entered promiscuous mode [ 509.782415][T14546] hsr_slave_1: entered promiscuous mode [ 509.788640][T14546] debugfs: 'hsr0' already exists in 'hsr' [ 509.795442][T14546] Cannot create hsr debugfs directory [ 509.874912][T14546] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 509.883630][T14546] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 509.892959][T14546] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 509.901790][T14546] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 509.942172][T14546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.958735][T14546] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.969823][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.976937][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.989411][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.996582][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.023442][T14546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.082571][T14546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.210257][T14546] veth0_vlan: entered promiscuous mode [ 510.218541][T14546] veth1_vlan: entered promiscuous mode [ 510.233419][T14546] veth0_macvtap: entered promiscuous mode [ 510.243942][T14546] veth1_macvtap: entered promiscuous mode [ 510.257376][T14546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.274321][T14546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.289608][ T3852] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.299329][ T3852] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.315938][T14586] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.333993][ T3852] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.377506][ T3852] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.429660][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 510.429675][ T28] audit: type=1400 audit(1773109821.359:1443): avc: denied { read } for pid=14659 comm="syz.7.1961" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 510.654874][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.784869][T14688] xt_CT: No such helper "snmp_trap" [ 511.045509][T14663] dummy0: left promiscuous mode [ 511.069549][T14663] dummy0: left allmulticast mode [ 511.131362][T14663] batman_adv: batadv0: Adding interface: dummy0 [ 511.147732][T14663] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.197465][T14682] loop7: detected capacity change from 0 to 512 [ 511.218023][T14663] batman_adv: batadv0: Interface activated: dummy0 [ 511.225463][T14682] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 511.253796][T14682] EXT4-fs (loop7): 1 truncate cleaned up [ 511.280517][T14682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.398868][T14696] loop8: detected capacity change from 0 to 1024 [ 511.448849][T14696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.611333][T14546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.340361][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 512.394558][ T28] audit: type=1400 audit(1773109823.329:1444): avc: denied { getopt } for pid=14722 comm="syz.3.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 512.713843][T14728] xt_CT: No such helper "snmp_trap" [ 513.175413][T14735] tipc: Started in network mode [ 513.190576][T14735] tipc: Node identity 3e086a7652ee, cluster identity 4711 [ 513.205948][T14735] tipc: Enabled bearer , priority 0 [ 513.222543][T14735] syzkaller0: entered promiscuous mode [ 513.230215][T14735] syzkaller0: entered allmulticast mode [ 513.260876][T14735] tipc: Resetting bearer [ 513.279299][T14734] tipc: Resetting bearer [ 513.289259][T14734] tipc: Disabling bearer [ 513.354889][T14733] ================================================================== [ 513.363038][T14733] BUG: KCSAN: data-race in __kernel_write_iter / set_task_ioprio [ 513.370793][T14733] [ 513.373142][T14733] write to 0xffff888128173b38 of 8 bytes by task 14738 on cpu 1: [ 513.380887][T14733] set_task_ioprio+0x24e/0x270 [ 513.385685][T14733] __se_sys_ioprio_set+0x24f/0x5a0 [ 513.390947][T14733] __x64_sys_ioprio_set+0x43/0x50 [ 513.396008][T14733] x64_sys_call+0x2bbf/0x3020 [ 513.400721][T14733] do_syscall_64+0x12c/0x370 [ 513.405336][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.411248][T14733] [ 513.413583][T14733] read to 0xffff888128173b38 of 8 bytes by task 14733 on cpu 0: [ 513.421228][T14733] __kernel_write_iter+0xdb/0x590 [ 513.426285][T14733] dump_user_range+0xa7d/0xdb0 [ 513.431076][T14733] elf_core_dump+0x21a2/0x2330 [ 513.435863][T14733] coredump_write+0xacc/0xdd0 [ 513.440574][T14733] vfs_coredump+0x26c7/0x3130 [ 513.445269][T14733] get_signal+0xd80/0xf60 [ 513.449628][T14733] arch_do_signal_or_restart+0x96/0x450 [ 513.455201][T14733] exit_to_user_mode_loop+0x6a/0x6f0 [ 513.460501][T14733] do_syscall_64+0x249/0x370 [ 513.465106][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.471018][T14733] [ 513.473349][T14733] value changed: 0x0000000000000000 -> 0xffff88810162fc80 [ 513.480464][T14733] [ 513.482793][T14733] Reported by Kernel Concurrency Sanitizer on: [ 513.488956][T14733] CPU: 0 UID: 0 PID: 14733 Comm: syz.3.1966 Tainted: G W syzkaller #0 PREEMPT(full) [ 513.499912][T14733] Tainted: [W]=WARN [ 513.503728][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.513798][T14733] ================================================================== [ 513.576157][ T9530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.