last executing test programs: 10m10.510781484s ago: executing program 32 (id=611): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x41000000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 9m1.306493388s ago: executing program 33 (id=1326): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a0000000000ff8000000000000000000000000000000000800000000000000008001200020002"], 0xa0}}, 0x0) 8m39.620500491s ago: executing program 34 (id=1555): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="400000001400010004000000000000002de7be80eab3b26014"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004c0000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x20000000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4d17}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x46e2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048000}, 0x45) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x2) 8m10.366870711s ago: executing program 35 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 8m5.095181742s ago: executing program 36 (id=1826): socket$key(0xf, 0x3, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000200000000aa000000000000000002001300", @ANYRES32=r1], 0x70}}, 0x0) 6m30.220098026s ago: executing program 37 (id=2720): set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="000000f3ffffff00b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m55.915188173s ago: executing program 38 (id=2979): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x7, 0x4, 0x7d, 0x3, 0x3e, 0xbffffffb, 0xf8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x7c, 0x4, 0x9}, [{0x3, 0x9, 0x100000001, 0x4, 0x5, 0x7, 0x2, 0x6}]}, 0x78) close(r3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) dup3(r4, r2, 0x80000) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x10, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000014000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) r11 = socket$kcm(0x23, 0x5, 0x0) listen(r11, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5m36.466639576s ago: executing program 4 (id=3143): syz_init_net_socket$x25(0x9, 0x5, 0x0) 5m36.40766099s ago: executing program 4 (id=3146): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x3d4, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x118b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86f4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5854}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb18}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x11}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5e}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbac}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90bb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x859b}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "1a44706c2bb2a07688bf8d3d52ef54091d5a41da45cd7839500138bbf48300bb54d09e4e2a967254675a61c234769de7be2969fbe68f3a5fc8457fa19ce507958530cf9076959da375bea006844339a5ae8b36b06d6b32443353bc4dfaf0cbd31da7a9948f4e07651cd10dace4879a96d3ae752e65e023af1420f9a91db36a240519bee1cf685ec109358e889d6f5ee2db5fd3e3527da50da0e8c8332b62a79a1907286ebbe7123f8fdf630daacdd18c206ade6a5f3f765928fe6b01e31f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ID={0x55, 0x3, "affbc6fa3449021acbadf54d242ea0c6e034d78dbcb4b3d975709511716d383958608652397350d1341e12f8189a6ad83750ffbc56b6d25d55625762d444a4d61a871e8537916d0aac3dbdaa7da4f3154a"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "8ee16ad3604b860fc99760a19772f73e4a361ded0e9b572a2e57"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x14000004}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', r4, 0x2f, 0x9, 0x5, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, @rand_addr=' \x01\x00', 0x700, 0x10, 0x101, 0x9}}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000680)) r5 = perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0x4, 0x80, 0x6, 0x6, 0x0, 0x2ff, 0x400, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0x10, 0x8}, 0x10000, 0x5, 0x3, 0x5, 0x3, 0x9, 0x3, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0x9) pipe2$watch_queue(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000780)={0x24, 0xad, 0x3}) r8 = accept4$inet(r7, &(0x7f00000007c0)={0x2, 0x0, @multicast1}, &(0x7f0000000800)=0x10, 0x81000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000502, r10, &(0x7f0000000880)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000980)={'sit0\x00', &(0x7f00000008c0)={@broadcast, 0x1, 0x0, 0xa0, 0x0, [{@multicast2}, {@multicast2}, {@multicast1}, {@remote}, {@multicast1}, {@local}, {@multicast1}, {@empty}, {@initdev}, {@multicast1}]}}) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4}, @void, @val={0xc, 0x99, {0x5, 0x12}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40854}, 0x8040) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000b00), r7) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r12, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10) r13 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000c00), 0x100, 0x0) write(r13, &(0x7f0000000c40)="81ff715899b2d57d247605d168", 0xd) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f0000001200)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000cc0)={0x4fc, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0x385, 0x91, "878788ce574f65e427b01183e951f0da041995aa0fe8dded582fdd390b2911cc5d2c808009b6f62c7eb2110fa34e66b8103afde8d8fdf886900114d41911c8673f727ab3708ecc510912be484bba916413e13a9c5ac709eb6ed46085596b720836976fd7efde0c8fbf711805333708e7a79f55b76986155fce043197dbe7637ab23b45d10e30ef85c9743b56b9b8b21df9a9cade6b90cd2d4e0d3a983574fe8477c22c2cae2569553e4273355244fc303ab45245f35d0ac8086033bdb3efa9aa3f1bdd0aee52c8a9ce562ea9692e932e13957f8823b8849dea8c78f70c1157830da05f02253e12a0bee5f5ca3131b80d55b461e121a14705914b49f7a0c0e5ac06f8ff9d1eb327856c2e621625b266c2f5ae739dc062000bdfaff971af0b439410b0310d187780ffccc163373394c6910e5562f29d9ad4f40005b6b9fd40e2d4bafd53a53b293e1013464ad34da2e495ff7fa2552f3a24ae1e7333c3c7a523be85e0fc0fb8a2b6f306e35d97f9a4187a4667325f67acbfb2ca4cddf520c09b3a9d697b8ffd35adf058261116a3b6ed34f8ff4e5c5a700983dceec62dff542a037237484d612ee53c88f4671c9ea35b09e94806f3bd885c00f6d32b29e1a0ed15744406f239b867fd01c30ceae302ef5fc5ab4c887725d86f613d41aa9a3428c3bc4631599fe533e19570960de59d6bd3055e2fa1654e3ceb32ad356a078e485171f1eebc57f5f2b440d0ca7a0422c05704a0aad51a42292d56d4267d599765f8cc1ebd2ebed57a576aa1bdf84fb7cc590d98537a1f9c826d125bbf23ccd7e2affb96d7e33935d8803da4e2e3788b9754b18e1b467fd979a8220198bc9cdf776b1c884df9a4951f4b5f2ff61d15b77f28d81b8a0bf7968f0f22e41c69c00b7175a7c7e83c165dd83d65db5b81448779ac749b52538cf6bb3df16cfa2a276c1e2ca772b3beeb26c112969b3611e791b83ee4add4a2146a1a5311e879c08811ac91a0591ff6d1ca181b710fd95e60ea8894b5cafb70784f173501335be7d1477ca29a0b7d5ab966aba1e49c93fa634d51226c86249cea6c1281efd008cb81e422e396328addc7cea37a2ea6e287ae04bf8205c437e11962befb14748e7d69aecc0073e2aa9828e3ebf883857e8fabecc5798e4ba7e0e6437265e4e298ca09a63ad9fa6d9b79b9313c40530826f05584e538645c77f985813a6acb869c83a45e379e4db12b39f9a65fe5d78418bd6e03a16c1a90260d5ca5a0fffa58a1a628594c8fd9"}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "861b4ffd869c7fcb0ab985d6eb52d8421b9559c2275b33aac8408e7dcb06ce843b4048cd0b011dab49c7e3f90fd4df85c95ffeb70b4f3e1fe1bc8c44cb5d20376e7f7365a08bf3f8d3b987a2917ce2684f04fa1ffc2426fe3059f8a5253f6f5c1249fe9ebe7b74a1e967d7cac2ea8790aaca934e8d50c459b4d485cbcfa99a7557eda76fdcee0b2b9d25486523cf9a4e5acfc4279b1a33c60cb67099815fbfbf205e727f580d92acbf6a21be00524d35c43019c4d4af81bfc0a546c5192508d57af07e67757a4038290f00c7f61d6fed88"}]}, @NL80211_ATTR_BEACON_TAIL={0x83, 0xf, [@peer_mgmt={0x75, 0x4, {0x1, 0x7ff, @void, @void, @void}}, @peer_mgmt={0x75, 0x6, {0x1, 0xf4, @void, @val=0x3, @void}}, @mesh_chsw={0x76, 0x6, {0x10, 0x80, 0xa, 0x100}}, @preq={0x82, 0x36, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x81, 0x5, @device_b, 0x84b, @value, 0x5, 0x7ff, 0x2, [{{0x1}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @broadcast, 0xa188}]}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @challenge={0x10, 0x1, 0x3}, @mesh_chsw={0x76, 0x6, {0x6, 0x0, 0xc, 0x1}}, @mic={0x8c, 0x10, {0x421, "291923876aa2", @short="936716f61c08e35c"}}]}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r14 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$isdn(0x22, 0x3, 0x11) bind$isdn(r17, &(0x7f0000001280)={0x22, 0xe0, 0x1, 0x7, 0x4}, 0x6) syz_genetlink_get_family_id$fou(&(0x7f00000012c0), r9) syz_clone3(&(0x7f00000014c0)={0x0, &(0x7f0000001300)=0xffffffffffffffff, &(0x7f0000001340)=0x0, &(0x7f0000001380)=0x0, {0x35}, &(0x7f00000013c0)=""/26, 0x1a, &(0x7f0000001400)=""/108, &(0x7f0000001480)=[r14, r14, r14, r14], 0x4, {r9}}, 0x58) bind$netlink(r1, &(0x7f0000001540)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc) sendmmsg$unix(r15, &(0x7f0000002500)=[{{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001600)="72116cc585b54f519584ad980a6bfa9e06bfa6e49537bc4c72e5e8d1d2cdb3906c326a4e3c92c25c0412e8880a4fb07bb5501b6b5352810e9c0c4a5e797ebe4d5d115cdeb8eacf10d806d6d6c46d3297ec33c2220c009c426343ed0b5d", 0x5d}, {&(0x7f0000001680)="7155cc16ba4d0a225836c145337c2b397c9749af5a303adc363c696cb1e8761023b90edea08003805bee39b6cb8d741360e93cb008cab6fdb36c852b67229626c6d236fd6101eeecea8e1970c147f9261efe0664fbc64ef48a808eaf1cb0bbbd067ad730f77baaf09d9f9503e3dc6f8fcd0bad0142e2532d77ca4872edb7b157701e6b61f7a370d46e987f843ea882b930fe6ab0ad8563d95758f13a58fe6fbbf115fb9d668115eded4c7c", 0xab}, {&(0x7f0000001740)="0d8117f501843b3dd1bde0f9cf41901de939dfb0e75f1444e8ec1b70a76500927e6af15f4d737ef58fbe04a23b01ac91b952b29f19dafeba68782aa4f0a7ed2d565a6236efa2501c7428214bc9dcac93d9a3e30104d2423e", 0x58}, {&(0x7f00000017c0)="7ea4213d8f385ef5611fe07f09c0704a771f52f45ce44690b7d1d75cb94a", 0x1e}, {&(0x7f0000001800)="6e2111d93db2f211f390383619d12d22b1dff24509ba4d10c7bdaf74d7cf98a7fb219edc18af5ddcecdfa1cd1ee6b5a87b1978270ed572cbe7e1cbdb8fff86384c934e2fc9d313932afb3fc57c70fdcf22e37310959f3bd32c51d708fda90fb53eaf59a8ef06686d7187f467813d27d09a5f86f09db1a19d1b09ba2bf13d6fc40829dcbad0db163b97c01123f65ad9047b36c27aa513dc41f764015281e0254217a27719ab49e16f5e0a373f19bf1b1bc8608656929f7d649b671a6d2a005a96a73ce59303ab86935376e81f7243c7fa8159cf4c8ac96bcefc75579f6d09accfe4d348a732df638ae6990afe8ab1a107", 0xf0}, {&(0x7f0000001900)="f01fa4915faf5b724266c482330029a1a4d89a97ac232429dec7e794b04fe8a0d0279bc34eefac7b0847f2d804f8754d25dcf6ed0f32d3be4cb73a1385b359ac89888a052af2a72dabf0771d77eeaf95a3608b6dbb7b421206b8c63befa4fd7cc43fed8d2171ca7b4246d75e3685ee70e824f5887884351c8d06b11694e0a5d1efceb5d99f6bd289e2546bcb40415ba67f17bcb0a80216d009207bbefd7424da9778d755ee6c8f3bbb1494fa6f075e133109721f89433946557ff9aa6db4045a29701c684cd056aea81487589b9f0709090fc29de81449ec7e4682584cd0ff3a554ef5c08131baf8fd0d5f8f4422", 0xee}], 0x6, &(0x7f0000001e80)=[@rights={{0x28, 0x1, 0x1, [r17, 0xffffffffffffffff, r16, 0xffffffffffffffff, r0, r15]}}, @rights={{0x24, 0x1, 0x1, [r8, r5, r16, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, r15, r5, r16, r18]}}, @rights={{0x34, 0x1, 0x1, [r0, r17, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r9]}}], 0xb0, 0x8801}}, {{&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001fc0)="91cef7024c05711caff8d653d055fb99eb02e330c322e13b0e85467ed8f4afbe4d063e483b362902e76fa8e6d838e610115b0f41335ba898dd9d0d52cbc3e0d743bde3170133af89d7fc9b86ea5ab767be64b4595d13279943bc1f7fc83fa1f4e41f4192250ec634146fdff214e7f4022735d4ff90117ac0141677d02303d8f0cf82cf551261906603bc9b3effd410168d2ea19d654a8212842656bddbe1cdfe8ddc5896c893232c", 0xa8}], 0x1, &(0x7f00000020c0)=[@cred={{0x1c, 0x1, 0x2, {r19, r10, r11}}}], 0x20, 0x4000800}}, {{&(0x7f0000002100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002180)="86dccfe97f8c19770c59943e151c4c40ff163ba3badd24599db2eec6b0b496bfdeefdc7f056d4926d2678d54066c85a86b2a50a437d5c7b44ad17a6c496bd640cedcdc07ea7c50bebc6c2cfc4f47c2e950396940bf13cf6106714a3c2cfabd21c121357732f26da24dfe4170c4fb2228498106c0901691198a7fd86e08deb204374e26eba99a3f2fb15935f08121bcbcff21c6d31f", 0x95}], 0x1, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {r19, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r14, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x34, 0x1, 0x1, [r7, r8, r1, 0xffffffffffffffff, r15, 0xffffffffffffffff, r18, 0xffffffffffffffff, r16]}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r13, r16, r15, r16, r5, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r20, r10}}}], 0x120, 0x4000081}}], 0x3, 0x40) 5m36.268622509s ago: executing program 4 (id=3148): socket(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="250a802f129e5b4261590000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet6_mptcp(0xa, 0x1, 0x84) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5b5e26bd7000ffdbdf6001000000050004000200000008000600ac141414"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) 5m36.2486442s ago: executing program 4 (id=3149): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) read(r2, &(0x7f0000001400)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000180)=""/168, &(0x7f0000000240)=0xa8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000030c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x193) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x4) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m35.303495229s ago: executing program 4 (id=3157): syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) 5m34.880873306s ago: executing program 4 (id=3165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30f5ffffff0900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c0002800800034000000005090001"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) 5m34.831544529s ago: executing program 39 (id=3165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30f5ffffff0900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c0002800800034000000005090001"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) 4m34.436641976s ago: executing program 6 (id=3734): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x401, 0x253237844f167991, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000f07a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=r5, @ANYRESOCT=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 4m33.89215675s ago: executing program 6 (id=3738): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380), 0x0, 0xfffffffffffffffc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000e0e00000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000400), &(0x7f0000000440)) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r8, &(0x7f0000000480)='./file0\x00') keyctl$chown(0x4, r0, r8, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x40c, &(0x7f00000004c0)={[{@init_itable}, {@dax_inode}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, '))}('}}, {@flag='async'}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 4m32.814186978s ago: executing program 6 (id=3746): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @loopback, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @empty, @local, 0x4}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xff000000, 0xffffffff, 0x3, 0x7, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="7feb2ee78a40", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x1, 0x80, 0x2, 0x1, 0xc190, 0x0, 'veth0_to_batadv\x00', 'erspan0\x00', {}, {0xff}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @remote, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020010}, 0x40040) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x2040600) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m31.900790725s ago: executing program 6 (id=3754): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xb, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000002c0)={[{@noswap}]}) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f00006f7000/0x2000)=nil, 0x2000, 0x1000002, 0x4c032, r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x20000840) syz_open_dev$ttys(0xc, 0x2, 0x1) 4m31.384562888s ago: executing program 6 (id=3767): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) setuid(0xee00) mq_unlink(&(0x7f0000000340)='eth0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x6) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='X\x00\x00', 0x3}], 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @void}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100008509000100e1533dc3"], &(0x7f0000000240)=""/225, 0x32, 0xe1, 0x1, 0x8e83}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r11, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x1}}, 0x30) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c01000019000100000000000300000000000000000000000000000000000000fe8000000000000000000000000000aa4e200000000000000a00008073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e0000001000000000000000000000000073500000403070008000000040000000200000020010000010000000000000000002300000004d36c01000002"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m29.92080355s ago: executing program 6 (id=3774): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 4m29.92051434s ago: executing program 40 (id=3774): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x40}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 2m9.111875813s ago: executing program 2 (id=5136): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380), 0x0, 0xfffffffffffffffc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000000000000000000e0e00000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000400), &(0x7f0000000440)) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r9, &(0x7f0000000480)='./file0\x00') keyctl$chown(0x4, r0, r9, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x40c, &(0x7f00000004c0)={[{@init_itable}, {@dax_inode}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, '))}('}}, {@flag='async'}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 2m8.122393045s ago: executing program 2 (id=5143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000120001f50cbd7000f5dbdf25fe80000000000000000000aa000004d60a006c000c0015005a0735000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40901}, 0x20048880) chroot(&(0x7f0000000100)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) 2m7.108752048s ago: executing program 2 (id=5146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000003", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32, @ANYRES16], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m7.070831801s ago: executing program 2 (id=5147): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x9]}, 0x8) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095196e1f2945048543788ea38bf61799ca7b4460081c5cf2736c96708a65e24c92c89a3ac71b5d3e1c4c854af20b834c0fed4e1c96a025d7448aeb2d5ff954c0e7773326c366c9a240ec4bdc1da0a1e1d66d470c92b871ced5f25902d26747b2aa3fca7e703e0d78eeca00d3ab9ba6e7537a8708d0f6c5e47bf93cf1bcbe94a3ae8e790000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x9f, 0x0, &(0x7f0000001180)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) timer_create(0x7, &(0x7f00000003c0)={0x0, 0x3e, 0x4, @thr={&(0x7f00000002c0)="93fcbebb4bd6603f5b9f6a3069193131cdeee972c8e3a88abc70a2672e470d249a4e4e9fa1da633f86bd16a9326b85f23cb5acdcc40a2633dbb3d99d19016d74c35085d51ba278d047f15ceceb1d66df738ba365f95c819a3f0307a9c1922acb2205dd0965996d6e6ee81c57098c15b56e3a77e744f47a84b9facf923e5c87ef0b6650615eec", &(0x7f0000000380)="47ada55e6528bf6d88f06a17e673b4b825e9f4c4e0deaea447ef5d6e03dd905ced135a6c7729f5482c5cb3b310844430cceb4a"}}, &(0x7f0000000400)=0x0) clock_gettime(0x0, &(0x7f0000000640)) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000440)={{}, {r4, r5+10000000}}, &(0x7f0000000480)) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r6 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000040)={[{@nodots}, {@nodots}, {@dots}, {@fat=@check_normal}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@nodots}]}, 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat2(r6, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x800, 0x85, 0x9}, 0x18) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noextend}, {@version_L}, {@cache_mmap}], [{@smackfsroot={'smackfsroot', 0x3d, '\\{$\\'}}, {@appraise}, {@dont_measure}]}}) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x1, 0x4) 2m6.496969157s ago: executing program 2 (id=5152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4004, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r3, 0x0, 0x2, &(0x7f0000000180)='-\x00'}, 0x30) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x20000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2m5.697154057s ago: executing program 2 (id=5162): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x453, 0x400, 0x70bd2d, 0x25dfdbfc, "1808a14c77ea9628fb65ee91515c2277b7"}, 0x24}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x0, &(0x7f0000000380)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @qipcrtr={0x2a, 0x1}, @in={0x2, 0x4e20, @empty}, @xdp={0x2c, 0x2, r7, 0x3d}, 0x6, 0x0, 0x0, 0x0, 0x81, 0x0, 0x40000, 0x10001, 0x7c83}) socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x65, 0x0, 0x5, 0x5c, 0x0, @local, @private=0xa010102}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) 2m5.192917969s ago: executing program 41 (id=5162): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x453, 0x400, 0x70bd2d, 0x25dfdbfc, "1808a14c77ea9628fb65ee91515c2277b7"}, 0x24}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x0, &(0x7f0000000380)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @qipcrtr={0x2a, 0x1}, @in={0x2, 0x4e20, @empty}, @xdp={0x2c, 0x2, r7, 0x3d}, 0x6, 0x0, 0x0, 0x0, 0x81, 0x0, 0x40000, 0x10001, 0x7c83}) socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x65, 0x0, 0x5, 0x5c, 0x0, @local, @private=0xa010102}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) 1m10.46954099s ago: executing program 7 (id=5422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000200)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x1, 0x51a, &(0x7f0000000580)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b0000000000000006c0ff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0x18d, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 1m8.968474124s ago: executing program 7 (id=5439): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000001c0)='./file1\x00', 0x101004c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfd, 0x64e, &(0x7f0000019200)="$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") r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x5) syz_emit_ethernet(0x46, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00005e1000/0x3000)=nil, 0x3000, 0x1000004, 0x20010, 0xffffffffffffffff, 0xc0d19000) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x6000, @fd=r5, 0xfffffffffffffff6, 0x0, 0x0, 0x19, 0x1, {0x1, r9}}) setreuid(0xffffffffffffffff, 0xee01) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) 1m8.296776787s ago: executing program 7 (id=5446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) setrlimit(0xd, &(0x7f0000000180)={0x2, 0xc6f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb96b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000440)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x7, 0x2002) socket$caif_stream(0x25, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m6.913828553s ago: executing program 7 (id=5464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80000) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x3f6, 0x1, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc894}, 0x4810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xb6a6ee5d0c4d14cc, 0x9}}}, 0x24}}, 0x40844) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000200)="6153d34097f20aade190399edbcd7225f4abe09308bed6ffb5f34f6732a4f3f3403eb2df068eed4b502d19", 0x2b, 0x80, &(0x7f0000000340)={0x11, 0x2, r5, 0x1, 0x7, 0x6, @remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1801, 0x0) mount$bind(0x0, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x100000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x90110, r6, 0x4a16f000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m6.024909609s ago: executing program 7 (id=5476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x60}, 0x40) 1m6.01093161s ago: executing program 7 (id=5480): set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000a00007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m5.961468253s ago: executing program 42 (id=5480): set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000a00007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.711635813s ago: executing program 8 (id=5619): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xe7000271) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c231, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x204, 0x2, 0xfb3d, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x18}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 53.540448234s ago: executing program 8 (id=5625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000200)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x1, 0x51a, &(0x7f0000000580)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b0000000000000006ffffffe5110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x1, 0x18d, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 52.640430291s ago: executing program 8 (id=5640): timerfd_create(0x0, 0x0) (async) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) (async) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8804) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8804) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x7, 0x81, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xad511, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0xa89, 0x8406, 0x6, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x4800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x20004000) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x20004000) r5 = dup(r4) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$char_usb(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/41, 0x66) openat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x0, 0x88, 0xffffffff, 0x2}) 52.606512883s ago: executing program 8 (id=5642): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 52.581737545s ago: executing program 8 (id=5643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb00000000000000000000002b0003e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 52.33390952s ago: executing program 8 (id=5648): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000001c0)="46271672066b0e2e7b21103dd4ba5c0ff5b0c2d41a201a4f316cae5f0ffcfae706ac01d6291e7bfc4bb74119a288d92953c76213b92c070b70197c18df9b675504d6dbfb43ae0ddc5a2fe003e97ee248394471429cfc0eff69ed32ca5c173b4b7eeb3907108e6200fc3ad660e9be490c0d7afe6901de9ec373db425eea0b157dc5ce2083d44923fff00f03b225c7528a4664329c0bb0de6db87e8ee3e4d171bb3d488e6cc108f28117328cbcf35d0cac10279cdfc4d7d4773a5f40206781109b093d69b40429487feb0f7b7bbf65da8161e2973e208dc06ca61f0864cddeee7be4ca9005e82c766dcf0c914c45dd0edc7f3098a8caff5b76f27c4d934c86dbd6bdb194eebf25cb179010c8a47c551121f81574dcd240996d605c389dd068a9b1be5093878219c37ce4d7a695349ee8017b38725774e64faa5914771f5f13ccb8c663038b97647df5d667eccf32195fc3e66a02abe47281c514b6b6ad924b12b0a5575bec207938888677c97b0b716098fc6ef2971308ca38b626215fb2279f772093541fa9e97200849a9f6d79d3a202695774cdbaeb6e966a7a16fccc14d0806c5a3777367822659e6f97ed021f11f67b4c906f90464121b795a8a089a6c7f2524a2fa172045cadb20a4779659e668977f215cd4bc42e43e3c05dbefd375203bd94f914b2c0e11fb90b1a929427c9a8c160f3f0579dafb80218d3ea1b72a3ee3706b1cb365a7b2f09d695b943b127fbff835959f6c0d9d95428f58c36718be18afaeea09ea03027f9124c255df0b2d0bbdc057bfae73654acffbc4b7ca3339175ce2161236ea16f48be128e3402c538c26255ee42ec3bf12739a1db128115a5ebfddd0916f3a1fde724f38a68ef5a0761672b750d3ac969f435d6d87806586745fe451cb68f0415f0f83fc3e88c51f23f83a70d4cb1f4e31a01b37e09e128a7d94553b87cc8c8c8c64a7eff7baf5d0ac4dd9cd37445788b52d039f4043d6b90e1b453a0fef2463e5c8ef5915ed3b3d56c51b3308011c7cf88f56832847b1b2b579875e9166ec31e53e77382854fc19968ef3004c5912d9a9d48efff6305e207f050ccb4f9491fc6eb8ed5c748271eb315d3e676a30bd2b68f4af6fd3b544c313968385d833e40c5e8d0a3b5f111f2edc321380f2e5e0dd64702771a034c6b979a4be1eda7705506603e4c02298b7fb2c10e77ec607ee494eb96525e150fd883ea575115130d04cb02f0de1d3124a20dbb60d9af49af60015920c2c3f312a11858f4eeae8ed0b6ad419acb0b766107d49fb756b90205395d2967179fd7b4451756420f3f72caa6cb4a07d0e59768a50f12dcf0382afe8ddc7f7df8104a8d5f026120cabc4caccdfe031c4c456565d668ffd44c67a8c82afd657deea8b9fd4bd468c1715d1af3124c6a2862e205277e8583cc6530d585052e996ae33f9756cf2ef3a067677ce7f6cb093436f11e75fc5d5381bf5cfb3b6bd65c932f5f6d0f1a71fd4475597affb884c0d7c35c9ba1dec4234e358321b1822485468ea1ec4415b082bd36ebcf0f7dc7e261940c41cdf42df78d3c388b5729571f34296775cc79b6b973daad46dcaeee6a814f960f3c0bd70743b048d5ede759f3f77c148ebd062d07a90077507ad75a14a5451fb3a6e25cf55e70e995c52463adfde647aeaaf27da2c0197928a474821c3bf64ca19ced087aab31512badbcce05ebe2e366ad0e900cefe6072bcbfb740072086000a495c16a8d95d7f61515c133d9f4c44cbdcc1b6744f002f6addd1bf6a541d6340bf08a5710cebe0e0ed72d4e1da66cc32ece57cad684e2f89d4dcc78176a5feef460940c8f73dcacf473499b43293a2f8a05de12a722bd4e4279c86551258d3221e487c2b175f56b42cf4079280947d8b7cd365c98384cf2e5d0d60bf9c914f1aede7da0b3c1fb7cfcaa1b0fd160f81224d4e47dc4423682aa1e14e6f4fb718f93808e8a9fe97db818923d38617e8bea5c6d44403fa1348716b2d02997ac6e2681aaca4e40b82fd65e511e5c8bc0496b1f3d7da8d74c1859eacb84a2f9ff0fd22e5db48c19ac79f80c3860186e9a0c5b7a20d85fccc0445e3079bebee309140709bac9f0e69f2fb68ccd5495c335fb73a1bdedb6593b24a7adc3575cfee46b2653916bd3bdfef207300a07830d44188b7a2246cd664f4188b4da21341e033ed4683de033bb0fafe0857acc497128b5ec4ef7c1b5d64cc08879f37665e7898ea006f204b25e0eca86793fdf4553fadf8b7df54d48340e8fe97d8f3a68dc0a0f6f573c5002c2c90dd1f8136940ef38606ac1dcd11d071a3ee373c7b34f45c37f6d0e8228653d203e72ee817aa815536981a9057ed3fff8647d709c5314fbbe192cc820909275c3c3e5093a3816b83999b23b312d87842b873f54253380f09801165f4c340ae510d76f8341eab9cb6174dc4ce5162767c6f356a6faa3e16804aa486751271c0f14963245896db53af898d10e36c272f15eefaa8ee6e1fadae2e9a155feb34c2642d0eacb1171544246931518d1342cec3726967cb22643795ae5b579829df2feb77bef4482df0d17026aebe3f849cf1ac23a7bdcfa7b3f51d229598110614f4aad42d69e3b27505aacd54c6c225949a360057863943584872a2fea7c074c5d17f21d9dc0aadd570f49ce3e3dae072787a4c1ab1fc48c81ab4e2755ca56e86191e4c73357bd63f67980f30973ed94cf88fb6f80ecb6e6cccea2868a6630c82f48f563a64cb1167c1e4397d0fafe7c29cbc2b6a8b6e04631dfcc2a4790b8d1e04880a883e96f3505e1e8aa26eb44caf84d1c93828d9827dfb43df0085cdb6fb610e47f0be9e4320560f3ee07b6ac9266bd449bace515b30562a81e197cd885032b20344dfbad426dba234e08ded3a78b983e9cbbb550b36b545119c173cc5e4dd9662f33cfddcb95de86b55fd551e169b34316ab680241c2172b0a74a6ace9306e4979c649318f3e754c45ca176fc6bb8b6f55f09af5972635c6d229ded8f51747966735826b1743c89fb5a90dc3d5b3ad587ad178e2dffc5b4d1d367b1de2c23637854725ec0efdaa603a764d8c0bbfad526c4126cd234b800720fafc789ff2de5381e9c0cbfc3ac6ad2e037fb478fc3ed8dee136861af3872eb2ee0d4b013ff2d893aebc1f20356a4037eb2462d5d9fb86631b4b9cbf7ac96156b8a813aa07198b8e810307403c331ebe9a0edaae6eaf7461f0a83cf82ec47920b727473e072a802aa5e71e2c6b3efc5b594aa95f0a2eb25f88722f2e3305bc3aae5513de8c9b70ad1ffca0097fccc92d65a789f3c514ccbcd62d73be339988ce1db1fc6df17e4a755c35d6b87bbaaffd18aa691fda8e5ef407ac2b2b6a205fee9bc8cbbbedfd5b5921010c4ad96dc8dcebfa1205e14e6d2ce4e8a9ae919ead542e2caab5d36b2847bf5457f0f7fec539012fc5edfc8471b36241a12c60cfd3babc87afdc566df0280b7c4e1d7df855538d1c55c14352e3cbe57ef64f8364f597ab0bcc128fee5b769f8c13de2a3c556cf09d147289e3b384b37348a1cc84929601410dc366bdc3b9bad8af9338fbbc6acaa63ce33203890c7a38ead40fdfb9a825cad609f764121baea2beb917715b4a1ab5a47009cae029e0852d500b376843ec111c8aa88ad73649f7a7340f1cafe226f2200c2ba82ef23bb72380bebcbdd28a40163f04a993d7a5ba60781f26878f85c943632a3619f75a72e8db1b24d8c979f0306c4afbc2acefb5ef98e68d6f68cc6e6f56542b99160f72b4779f2b868a4fb7585fde477ea0fcc1b33e8c18540d297f0d14691681d3b0c2961a07230839dfad19f55b46fe37fc93d1dfa1ac159ed12b4d6a67c5c2e0c30114755344ca7e3166116c09d9ba194d50963a1823199fa56ee17fbfe8682dee816c103a775a8ce70d7fd7a9c169fbaaa082464b2cbf09e38e4ccc71b82a04e088fbfa133f1cb66642462fc1858472cc4534249abc0ebd28d943d248cf43f45135bdb1404524495865b7e363e25e8fe500a663ba4b6e54684ee7f5852eeef281e5b722fe7072688b3a9d2725b737b0f643f860b3dc7b57e164ef85ef790b847fe2b38f3c98473eb7cc084b8daa60bfde799e5419177f3213224f3a9bfd5b4b1f1ee3229ea2c81dbddf4cfcf2c4d9b913b07c34446959eb31d9ab1e73aa0455ce6f80e6d715e671be25edff92b38cde09877b11d5b62021e449cdf483ba3a06e427bf3c00009ab0679de73a67c31fe4e1d04beee21b20b579436bf3bb77069e02f7ff28d8c67748cb5024b4ebe73028824571630e00b15bbcadfb7c5c1a74cb3d4bcce2161fe67b90926aa23a61e135812fa679f26992a9d3bc048981a45069f1c295b8889054b9c9f4ebd3c1a345e2806514e7ed95b214e66dd840c7176611022ea172e74de2709575124eb249e8a9cb3079ef1ebbdb3c0ec71dd02aaec3b1e8e017073f6c85a022b76ee7e90194ba273e9bcb0098e361f45c3c12156dd340440cc9aa8b825b6b432fadf7c47233a443c753f33e4e85ee10ddeb78a521b7157137303af0023ce32c4819afc80781aa0f2fe79f0d5fa46c3a02881735acaae750f2629636ad7f991114b517ef46662abbd4c0a5ca6f68671ed7f43b6601da2f569648eb1968a6706dd2a3493b3917025fb5368c402cd3a1c7d9648ecb6dbbe0ea18607986173a9109d5a257c35a52715f0e2a6d8e2bbdb7a6defdd268fd41a53795a4f9bdbde8c40fe5290d623cbe9eba87fcaddba22ff928aa74aabc29d03364ed764e5f48229a2266448101301210b28475ed9ea657c5ffe2428307dc4dc932c72b8d2e3a72427f54f7de55af218ff71d05b2c44e2aad79668ab6b72df6e6f0e4efdc1125e13bc7ac3f9ff473fdb940eb6f84f6fad6c4ba2b253326b365b58afaea5264b1b71028ad05112fdcd1ad586997e3176b591d471ccd0829d48c018cc3be2438549e5c38424d16c2956b8960ef467caeb5e093bc614f51154b9285499ef75e48928c26476bd3e6ff40baeddfd2ca8d547254d84919f016f33f8fe671df9c0ea1279d92c6b4d8f741574bc467652a352fa6381fdad6c92611fe6036981e4a2a6e29dc24558d18649588e1237582838615de7361077ad8e58468dac096b9afd47353eafb494d5f5f92ec525279d650854e10a3de471de3a19c76fc4f5c7e668b0d8421e7586a857ce4e912cef8d8411ef6c1e445ff83de7883a61812528cd68e421808f3a265394b59fc10774c04cbdd72c339c8a99fed07b75b85ffe7e25d57d1d86b6c3acc79d77c0f5c31e504e9080d3fedc5d8457d30c0f38eba8e7071d7509d0b7cd4b503b70abe8eb33f288ebfbc1bb693b87554628496d6b0952999d2fe092123c3695913c448efd64c9d9235acce819d0433e37907b6552b24100dbb8f9055802062c8b91e75e99e15597faa6d4693d8944fcc0ea3ec3f9cb6cafc60e3af404a3390eeb96d78281c0b58c41599d691fafb49c87f666fb838b9be6e9deebc4ee034aac4131f9c6b3a75cc46ef0146f4b2d4aedb2acd4dcd3c6ada4fd69c89a2acb4ea74a6fceee75b5e86ebf5b7ca3cc8c5553cee7a268e49649cd2fedbde85f42a289140b54145d29a4f39b1317212309e1610f6752a307464c2532a25945e5c2fee21ee38c96c37845cd0fcfd299d6a4f7c5081b3c9d98ff8119118437f826c1acf24d3e0e28285d7932236267b4a85e25f6bbae400a47f982f059fe49e577d3ff71549d6814f179b04ae8fcdd5cedc4fe89c7fc729fd7ad036eff6e763deaa4b09441255d964ae95bcf42426e9ad9c9ded6af2", 0x1000}, {&(0x7f00000011c0)="7662d47eb7ff0ca2cb1ae1668fa40f759f8bfd46aa16c343fcab82e1030400fd72bb02b70da726fcd866cf2fc8c0205d980a844bc20f439498f925c1b753ae83dd1a12dae7169ed8bb67ada51d82181234a2940f7f7dd5a87c837e1186a45d258079a9b05a1f93ef9156debad1775b4904cce823e8dd", 0x76}, {&(0x7f0000001240)="6f030d16a98f01db8c4924ac051b6d5c7dfd76a2e2c77daa4bb447a23bc973a679128fbd653418c8b5ebe8dd811f10f6d4d4f9356ac698d1673a2f87d927c582f0f948a77af8f5d512ad22654e2e6fedea1caac5b7f578f183630c77631e67001d2cffcca55b8137faf95b7f67384108a8c8c0188f245ae37eba3ffc36d529b7f0c93a0405e493f21e079445", 0x8c}, {&(0x7f0000001300)="8252a0a575b01c5eb69ff1933bd2b59f5a406f44ea257abf0ac925cf45b438e707650496a54bf3d64a0f4d3864db28c4000b4948377f154c82a8183fda5364c3b4fac2dee02d3d4c993799bc482ea9766c0a33bb4909c1b5c9ff9ef5f32fbd20dc0d71377f", 0x65}], 0x4, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6b80}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @rr={0x7, 0x23, 0x7, [@empty, @remote, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @broadcast, @rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0xe6, [@multicast2, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x80}}, {{&(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001480)="03fb121fefe869dcb4d78d320c", 0xd}, {&(0x7f00000014c0)="ee3e1b379512930594caf659a805a39085f94a74e268b353f40fd2827bb9414487149c1ae7886a6a86413dbac00cb748e1bd5b8a75559bf6e5a49178d92a33df5255b91a6b75925b0f77b49c1a821436ef01845ecf496ea681fe441fc8bad30f0a4f5c9e10e3c4e23e9d3d65c3010161a165b46c8ba3b3af6db550bc55d175914e71c360597e6140c646480bb773bacb5eef743b7ffc", 0x96}, {&(0x7f0000001580)="904b65712d88f4ba0be71e409ec79e870dfd945538c4299bf9eb6ada36f1e38982ba4fc4ccb435eeb076a95c02e4a67c951a", 0x32}, {&(0x7f00000015c0)="59f9a5a2745de8d1cc092000fb0033974f3eb505e23acfa4fedce59122165ba6eb8bf3b897e38de99b58d948f8646f45bddc0a7a9df5e76c92b591fc79c9fb7f67f4a97efc806baeda48f17da77778b9fb78657e2eb43a7a3a1b8d2497acaa403b313dd0bb1713dc5d7c18a8a68ce82ffaa2648c83127fed461f5af21bf497412b510c52215f76edad8c556af71cd55b8abdffaf1a13822a2cec61c1fa7af4f172c3d845546183a3d5e2ead3e2ff972983530147da6588ea5a53a001f02371f42cb501925be8db19882a66968bfd439e7a1fcf", 0xd3}], 0x4, &(0x7f0000001700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x9}]}, @noop, @generic={0x94, 0xd, "e34572884ac7daaf676add"}, @generic={0x44, 0xd, "4b2cb1c1832b5d13262469"}, @cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "e54af75761422a126dec5d3d86"}]}, @lsrr={0x83, 0x13, 0x80, [@remote, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x41}]}, @end, @timestamp={0x44, 0x18, 0x2f, 0x0, 0x8, [0x43f1, 0xe, 0x7, 0x7, 0x4228d065]}, @rr={0x7, 0xb, 0x1d, [@empty, @empty]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x4, 0x6, 0x0, 0xe}]}}}], 0xd0}}, {{&(0x7f0000001800)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001840)="53640a9dfcc84dc68abce1614539e39aa1534af8705f0df42cac52fa7a8e24a1e665bc5bd63ddecd031fba6ecc87302c0a53fdcc5292298e7d3fbd81a60e56df18a06f699734369244bc593ab63d36443167c331", 0x54}], 0x1, &(0x7f0000001900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x94, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xca, [@remote, @loopback, @local]}, @rr={0x7, 0x17, 0x54, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x43}, @local, @empty]}, @timestamp_addr={0x44, 0x24, 0x49, 0x1, 0x3, [{@loopback, 0x7}, {@private=0xa010102, 0x2}, {@multicast1, 0x2}, {@remote, 0x96a}]}, @rr={0x7, 0x27, 0xdf, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, @remote]}, @lsrr={0x83, 0xf, 0x3d, [@remote, @empty, @local]}, @end, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb}}], 0xf8}}], 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x7, 0x6) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x101, 0x3) 52.277152923s ago: executing program 43 (id=5648): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="7662d47eb7ff0ca2cb1ae1668fa40f759f8bfd46aa16c343fcab82e1030400fd72bb02b70da726fcd866cf2fc8c0205d980a844bc20f439498f925c1b753ae83dd1a12dae7169ed8bb67ada51d82181234a2940f7f7dd5a87c837e1186a45d258079a9b05a1f93ef9156debad1775b4904cce823e8dd", 0x76}, {&(0x7f0000001240)="6f030d16a98f01db8c4924ac051b6d5c7dfd76a2e2c77daa4bb447a23bc973a679128fbd653418c8b5ebe8dd811f10f6d4d4f9356ac698d1673a2f87d927c582f0f948a77af8f5d512ad22654e2e6fedea1caac5b7f578f183630c77631e67001d2cffcca55b8137faf95b7f67384108a8c8c0188f245ae37eba3ffc36d529b7f0c93a0405e493f21e079445", 0x8c}, {&(0x7f0000001300)="8252a0a575b01c5eb69ff1933bd2b59f5a406f44ea257abf0ac925cf45b438e707650496a54bf3d64a0f4d3864db28c4000b4948377f154c82a8183fda5364c3b4fac2dee02d3d4c993799bc482ea9766c0a33bb4909c1b5c9ff9ef5f32fbd20dc0d71377f", 0x65}], 0x4, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6b80}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @rr={0x7, 0x23, 0x7, [@empty, @remote, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast, @broadcast, @rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0xe6, [@multicast2, @rand_addr=0x64010101, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x80}}, {{&(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001480)="03fb121fefe869dcb4d78d320c", 0xd}, {&(0x7f00000014c0)="ee3e1b379512930594caf659a805a39085f94a74e268b353f40fd2827bb9414487149c1ae7886a6a86413dbac00cb748e1bd5b8a75559bf6e5a49178d92a33df5255b91a6b75925b0f77b49c1a821436ef01845ecf496ea681fe441fc8bad30f0a4f5c9e10e3c4e23e9d3d65c3010161a165b46c8ba3b3af6db550bc55d175914e71c360597e6140c646480bb773bacb5eef743b7ffc", 0x96}, {&(0x7f0000001580)="904b65712d88f4ba0be71e409ec79e870dfd945538c4299bf9eb6ada36f1e38982ba4fc4ccb435eeb076a95c02e4a67c951a", 0x32}, {&(0x7f00000015c0)="59f9a5a2745de8d1cc092000fb0033974f3eb505e23acfa4fedce59122165ba6eb8bf3b897e38de99b58d948f8646f45bddc0a7a9df5e76c92b591fc79c9fb7f67f4a97efc806baeda48f17da77778b9fb78657e2eb43a7a3a1b8d2497acaa403b313dd0bb1713dc5d7c18a8a68ce82ffaa2648c83127fed461f5af21bf497412b510c52215f76edad8c556af71cd55b8abdffaf1a13822a2cec61c1fa7af4f172c3d845546183a3d5e2ead3e2ff972983530147da6588ea5a53a001f02371f42cb501925be8db19882a66968bfd439e7a1fcf", 0xd3}], 0x4, &(0x7f0000001700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x9}]}, @noop, @generic={0x94, 0xd, "e34572884ac7daaf676add"}, @generic={0x44, 0xd, "4b2cb1c1832b5d13262469"}, @cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "e54af75761422a126dec5d3d86"}]}, @lsrr={0x83, 0x13, 0x80, [@remote, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x41}]}, @end, @timestamp={0x44, 0x18, 0x2f, 0x0, 0x8, [0x43f1, 0xe, 0x7, 0x7, 0x4228d065]}, @rr={0x7, 0xb, 0x1d, [@empty, @empty]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x4, 0x6, 0x0, 0xe}]}}}], 0xd0}}, {{&(0x7f0000001800)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001840)="53640a9dfcc84dc68abce1614539e39aa1534af8705f0df42cac52fa7a8e24a1e665bc5bd63ddecd031fba6ecc87302c0a53fdcc5292298e7d3fbd81a60e56df18a06f699734369244bc593ab63d36443167c331", 0x54}], 0x1, &(0x7f0000001900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x94, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xca, [@remote, @loopback, @local]}, @rr={0x7, 0x17, 0x54, [@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x43}, @local, @empty]}, @timestamp_addr={0x44, 0x24, 0x49, 0x1, 0x3, [{@loopback, 0x7}, {@private=0xa010102, 0x2}, {@multicast1, 0x2}, {@remote, 0x96a}]}, @rr={0x7, 0x27, 0xdf, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, @remote]}, @lsrr={0x83, 0xf, 0x3d, [@remote, @empty, @local]}, @end, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb}}], 0xf8}}], 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x42000) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000280)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x7, 0x6) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x101, 0x3) 5.71866563s ago: executing program 9 (id=5990): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x408, 0x7) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005d4a74e715df", @ANYRES16=r1, @ANYBLOB="1400251001000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0x24000000) lsetxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:system_map_t:s0\x00', 0x1a, 0x0) 3.916739684s ago: executing program 9 (id=5995): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioprio_get$pid(0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = socket$tipc(0x1e, 0x5, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, 0x0, 0x0) connect$tipc(r6, &(0x7f0000000140)=@id, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 3.722975456s ago: executing program 0 (id=5997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000003c03e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 3.66089528s ago: executing program 0 (id=5999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffffffffffff44, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000f50000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080002400000000008000140000000002c000000020a01010000000000000000000000060c00044000000000000000030c000440000000000000000114000000110001"], 0xc4}}, 0x0) 3.441953674s ago: executing program 0 (id=6002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000004000000005f000000400000000000000104800000200002000a0000000000000000120000000000000000000000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 3.33289341s ago: executing program 0 (id=6004): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.254374785s ago: executing program 0 (id=6005): r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xb) fsopen(0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000008}) epoll_wait(r8, &(0x7f0000000080)=[{}], 0x1, 0xffffff90) close(r6) io_uring_setup(0x1b7b, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x1001}, 0xe) 3.064520537s ago: executing program 3 (id=6009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c0002800800034000000005090001"], 0xc0}, 0x1, 0xfffffffffffffff5, 0x0, 0x20020014}, 0x0) 3.063204048s ago: executing program 3 (id=6010): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdb28000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0xb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc, 0x2, 0x0, 0xffff}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.86831174s ago: executing program 9 (id=6011): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone3(&(0x7f0000001680)={0x104038d80, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x38}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/220, &(0x7f0000001640)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x2}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xe000000000000001, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x4000804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001006000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0], 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x4000800) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x14, r5, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0648ef4260a091377b029963a617b488e12b214d3309f39584938e73e5107dbfe95b208fb01c74ccf92c6cfa83c5409b937478da2415325273ae36c16289fb53c5", @ANYRES16=r10, @ANYBLOB="01002abd700100800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.751232147s ago: executing program 1 (id=6012): socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0x60d0, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/195, 0xc3}], &(0x7f0000000280)=[0xfffffffffffffce0, 0x7]}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r1 = io_uring_setup(0x519c, &(0x7f0000000300)={0x0, 0x33b9, 0x800, 0x3, 0x1f3}) io_uring_enter(r1, 0x2d97, 0xfbbf, 0x33, 0x0, 0xfffffffffffffde6) 2.54888415s ago: executing program 9 (id=6014): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x4, 0x3, 0x9, 0x4, 0xfffffffffffffffc}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) 2.472818514s ago: executing program 1 (id=6016): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/ip_vs_stats_percpu\x00') socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0, r0, r0, r0], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0xffffff7f00000000) 2.152849195s ago: executing program 9 (id=6017): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$inet6(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) close(r8) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9, {0x2}}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.077675099s ago: executing program 1 (id=6018): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000006c03e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1.947448648s ago: executing program 1 (id=6019): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="b31c47", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)="f0d791c14d221f4b3a16e722bfc860ab2b884c4e10fc8036d424f716f77d161ab89bb731a03ea707821944ffdd96ac567f866694831706ed7b2eeb58c0ce801eebc9781565522dc8b7cc6794979f9f6da3882586b945b6f4e62fcbbcb5b0f9d818780ac0417d1753014d4b80", 0x6c}], 0x1}}, {{&(0x7f0000001780)={0xa, 0x4e21, 0x2, @mcast1, 0xeaed}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001440)="f395725f656e3e806df581dab1066a48bf683e2a70d7a06c6ceca3b2609328b84ff267a7f051105c39a212f23c57837f7a4fdf7e74d68e261d9a75e0dd36772094a952c02d6c79299aa2a1bf9b0d70913cbb7e08177173435f704cba51445a3d8254cad2cf1103586446891da7d6214c5f72710f6e378302c8a91640c95ab53d7224ac159fc72e7445c59fdbc52d1fe440ac2af4cd7d", 0x96}], 0x1}}], 0x3, 0x48800) (async) sendmmsg$inet6(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="b31c47", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)="f0d791c14d221f4b3a16e722bfc860ab2b884c4e10fc8036d424f716f77d161ab89bb731a03ea707821944ffdd96ac567f866694831706ed7b2eeb58c0ce801eebc9781565522dc8b7cc6794979f9f6da3882586b945b6f4e62fcbbcb5b0f9d818780ac0417d1753014d4b80", 0x6c}], 0x1}}, {{&(0x7f0000001780)={0xa, 0x4e21, 0x2, @mcast1, 0xeaed}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001440)="f395725f656e3e806df581dab1066a48bf683e2a70d7a06c6ceca3b2609328b84ff267a7f051105c39a212f23c57837f7a4fdf7e74d68e261d9a75e0dd36772094a952c02d6c79299aa2a1bf9b0d70913cbb7e08177173435f704cba51445a3d8254cad2cf1103586446891da7d6214c5f72710f6e378302c8a91640c95ab53d7224ac159fc72e7445c59fdbc52d1fe440ac2af4cd7d", 0x96}], 0x1}}], 0x3, 0x48800) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x11, 0x0, 0x8000000) (async) fallocate(r2, 0x11, 0x0, 0x8000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x2441, 0x83) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(0x0, 0xecf86c37d53049cc) 1.071681083s ago: executing program 0 (id=6020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) setrlimit(0xd, &(0x7f0000000180)={0x2, 0xc6f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb96b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000440)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x7, 0x2002) socket$caif_stream(0x25, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d0301000a0000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 740.809243ms ago: executing program 1 (id=6022): r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530"], 0x110}}, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) 672.788488ms ago: executing program 9 (id=6023): unshare(0x62040200) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'veth1\x00', {0x7fffffff}, 0x8001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x24000014) r5 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_GET_DUMPABLE(0x3) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000009, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x20, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 539.599356ms ago: executing program 1 (id=6024): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_bridge\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x87, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x404009, 0x80, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x6, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x80, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xbfffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) 410.107674ms ago: executing program 3 (id=6026): set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000187b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 341.069519ms ago: executing program 3 (id=6027): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f0000000000851000000200000085000000d100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 280.790833ms ago: executing program 5 (id=6029): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c221000086dd6015690900482f00fc020000000000000000000000000000ff0200f5000000000000000000000001"], 0x0) 276.902783ms ago: executing program 3 (id=6030): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00200000000000000000000000000000000000000000002300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e0000001000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000002"], 0x158}}, 0x0) 241.494824ms ago: executing program 5 (id=6031): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) (async) ppoll(0x0, 0x0, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) (async) r2 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") (async) r3 = socket$unix(0x1, 0x2, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r2, 0x5f82a000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x25df561430a08302, 0x20) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) open(0x0, 0x0, 0x0) (async) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x8}, [@IFLA_MASTER={0x8, 0x3, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x84) 172.898089ms ago: executing program 5 (id=6032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000005e39cffff00000a00804000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000084010500e0000002000000000000000000000000000000003c00000000000000ac1414aa000000000000000000000000ff34000000020000080000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000006000008000000080000fcffffff0a010102000000000000000000000000000000003200000000000000000000060000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 172.791419ms ago: executing program 5 (id=6033): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYRES16], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 172.539659ms ago: executing program 3 (id=6034): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x100, 0x100, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000000), {[{{@arp={@private=0xa010101, @local, 0xff, 0x0, 0x10, 0x10, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x3913, 0x6, 0x9f, 0x3000, 0xfffc, 'veth1_to_bridge\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x37, 0x7, {0x9}}}}, {{@arp={@empty, @private=0xa010100, 0xffffffff, 0x0, 0x7, 0x2, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xfffb, 0x9, 0x199, 0x8, 0x5, 0x3, 'veth0_to_bond\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @mac=@local, @initdev={0xac, 0x1e, 0xa7, 0x0}, @private=0xa010102, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @remote, @broadcast, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000002900), 0x0, 0x0, 0x0, 0x200080d4}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @mon_options]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="18e0b1ffff00000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x24018880) 156.41836ms ago: executing program 5 (id=6035): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000120001f50cbd7000f5dbdf25fe80000000000000000000aa000004d60a006c000c0015005a0735000600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40901}, 0x20048880) chroot(&(0x7f0000000100)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) 0s ago: executing program 5 (id=6036): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x100000, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x100000, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) (async) ftruncate(r3, 0x2007ffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x1000000201005) (async) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = dup(0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) fsetxattr(r4, &(0x7f00000002c0)=@random={'trusted.', 'vcan0\x00'}, &(0x7f00000003c0)='TIPC\x00', 0x5, 0x0) r5 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x100c4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)="b5", 0x1}], 0x2) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)="b5", 0x1}], 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x34d, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x44044) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x34d, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x44044) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000225bd700000000024740000000c416c696e6b00000000000000005163f0f819a12c98a2522d12c0e6507540297caf43b9b0401d6912b5e1dba381379490538098e71e19c801803b9fa49244df777834d026ce57f45bf57cad4b37ba185ed4c3bfb0d568c6c85b84df9b31abfdf95f9993d7e600"/132], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x8400) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000225bd700000000024740000000c416c696e6b00000000000000005163f0f819a12c98a2522d12c0e6507540297caf43b9b0401d6912b5e1dba381379490538098e71e19c801803b9fa49244df777834d026ce57f45bf57cad4b37ba185ed4c3bfb0d568c6c85b84df9b31abfdf95f9993d7e600"/132], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x8400) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x1c, r7, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r6, 0x2219, 0x1adf, 0x16, 0x0, 0x0) (async) io_uring_enter(r6, 0x2219, 0x1adf, 0x16, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x300, 0x100000c, 0x130, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, 0x7f7fffff, 0xff, 'pim6reg\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0xc8, 0x138, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e21], [0x4e21, 0x4e24], 0x0, 0x4, 0xfff2, 0xf9}}, @common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) kernel console output (not intermixed with test programs): ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 584.135681][T22376] syzkaller0: entered promiscuous mode [ 584.136120][T21261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.141462][T22376] syzkaller0: entered allmulticast mode [ 584.770240][T22386] lo speed is unknown, defaulting to 1000 [ 584.782663][T22386] lo speed is unknown, defaulting to 1000 [ 585.125052][T22401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5167'. [ 585.163433][T22401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5167'. [ 585.185028][T22410] loop8: detected capacity change from 0 to 1024 [ 585.237086][T22410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.278168][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.423583][T22423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5168'. [ 585.573531][T22407] lo speed is unknown, defaulting to 1000 [ 585.580536][T22407] lo speed is unknown, defaulting to 1000 [ 585.698494][T20613] bridge_slave_0: left allmulticast mode [ 585.704894][T20613] bridge_slave_0: left promiscuous mode [ 585.710971][T20613] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.792282][T22438] loop8: detected capacity change from 0 to 512 [ 585.802975][T22438] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.5175: inode has both inline data and extents flags [ 585.816741][T22438] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 585.816893][T22438] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.5175: couldn't read orphan inode 15 (err -117) [ 585.826614][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 585.826632][ C1] EXT4-fs (loop8): initial error at time 2000000698: ext4_orphan_get:1397: inode 15 [ 585.826669][ C1] EXT4-fs (loop8): last error at time 2000000698: ext4_orphan_get:1397: inode 15 [ 585.867326][T22438] loop8: lost filesystem error report for type 5 error -117 [ 585.868370][T22438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.895819][T20613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.905781][T20613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.916100][T20613] bond0 (unregistering): Released all slaves [ 585.923981][T20613] bond1 (unregistering): (slave veth1_to_team): Removing an active aggregator [ 585.933975][T20613] bond1 (unregistering): (slave veth1_to_team): Releasing backup interface [ 585.943374][T20613] bond1 (unregistering): Released all slaves [ 585.980619][T20613] tipc: Left network mode [ 585.989406][T20613] dummy0: left promiscuous mode [ 585.996212][T20613] team0: left promiscuous mode [ 586.002069][T20613] team_slave_0: left promiscuous mode [ 586.009042][T20613] team_slave_1: left promiscuous mode [ 586.017961][T20613] hsr_slave_0: left promiscuous mode [ 586.024681][T20613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.042793][T20613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.077648][T22462] x_tables: duplicate underflow at hook 1 [ 586.147758][T20613] team0 (unregistering): Port device team_slave_1 removed [ 586.161825][T20613] team0 (unregistering): Port device team_slave_0 removed [ 586.252409][ T23] lo speed is unknown, defaulting to 1000 [ 586.288514][T22407] chnl_net:caif_netlink_parms(): no params data found [ 586.296171][ T23] infiniband syz2: ib_query_port failed (-19) [ 586.558275][T22407] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.558324][T22407] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.558436][T22407] bridge_slave_0: entered allmulticast mode [ 586.558937][T22407] bridge_slave_0: entered promiscuous mode [ 586.559840][T22407] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.559872][T22407] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.559933][T22407] bridge_slave_1: entered allmulticast mode [ 586.571167][T22407] bridge_slave_1: entered promiscuous mode [ 586.621686][T22407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.661083][T22407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.671439][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.682081][T22407] team0: Port device team_slave_0 added [ 586.689082][T22407] team0: Port device team_slave_1 added [ 586.705206][T22407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.705218][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.705295][T22407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.706072][T22407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.706082][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.706105][T22407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.751018][T22407] hsr_slave_0: entered promiscuous mode [ 586.751634][T22407] hsr_slave_1: entered promiscuous mode [ 586.791827][T22515] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5188'. [ 586.823322][T22407] debugfs: 'hsr0' already exists in 'hsr' [ 587.056042][T22407] Cannot create hsr debugfs directory [ 587.159597][T22529] loop8: detected capacity change from 0 to 1024 [ 587.219431][T22529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.299714][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.606495][T22407] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 587.657641][T22407] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 587.687039][T22407] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 587.713890][T22407] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 587.883834][T22407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.939363][T22542] loop8: detected capacity change from 0 to 2048 [ 587.948910][T22407] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.980183][T20610] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.987495][T20610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.022875][T20610] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.030115][T20610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.066666][T22542] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.098498][T22407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.131680][T22407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.168717][T22542] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5194: bg 0: block 234: padding at end of block bitmap is not set [ 588.271371][T22542] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 588.291544][T22584] 9p: Could not find request transport: f=0x0000000000000004 [ 588.360662][T22542] EXT4-fs (loop8): This should not happen!! Data will be lost [ 588.360662][T22542] [ 588.381146][T22542] EXT4-fs (loop8): Total free blocks count 0 [ 588.387907][T22542] EXT4-fs (loop8): Free/Dirty block details [ 588.403716][T22542] EXT4-fs (loop8): free_blocks=0 [ 588.408444][T22407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.409199][T22542] EXT4-fs (loop8): dirty_blocks=16 [ 588.425527][T22584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5196'. [ 588.446397][T22542] EXT4-fs (loop8): Block reservation details [ 588.460748][T22542] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 588.561406][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5197'. [ 588.582722][T22618] FAULT_INJECTION: forcing a failure. [ 588.582722][T22618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.604827][T21298] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 588.610416][T22618] CPU: 0 UID: 0 PID: 22618 Comm: syz.3.5198 Tainted: G W syzkaller #0 PREEMPT(full) [ 588.610444][T22618] Tainted: [W]=WARN [ 588.610486][T22618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 588.610628][T22618] Call Trace: [ 588.610634][T22618] [ 588.610642][T22618] __dump_stack+0x1d/0x30 [ 588.610669][T22618] dump_stack_lvl+0x95/0xd0 [ 588.610748][T22618] dump_stack+0x15/0x1b [ 588.610768][T22618] should_fail_ex+0x263/0x280 [ 588.610801][T22618] should_fail+0xb/0x20 [ 588.610823][T22618] should_fail_usercopy+0x1a/0x20 [ 588.610896][T22618] _copy_to_user+0x20/0xa0 [ 588.610978][T22618] simple_read_from_buffer+0xb5/0x130 [ 588.611001][T22618] proc_fail_nth_read+0x10e/0x150 [ 588.611030][T22618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.611134][T22618] vfs_read+0x1ab/0x7f0 [ 588.611150][T22618] ? __rcu_read_unlock+0x4e/0x70 [ 588.611188][T22618] ? __fget_files+0x184/0x1c0 [ 588.611210][T22618] ? mutex_lock+0x57/0x90 [ 588.611230][T22618] ksys_read+0xdc/0x1a0 [ 588.611271][T22618] __x64_sys_read+0x40/0x50 [ 588.611288][T22618] x64_sys_call+0x2886/0x3020 [ 588.611346][T22618] do_syscall_64+0x12c/0x370 [ 588.611407][T22618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.611429][T22618] RIP: 0033:0x7f3d1cd6d04e [ 588.611444][T22618] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.611462][T22618] RSP: 002b:00007f3d1b7fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 588.611481][T22618] RAX: ffffffffffffffda RBX: 00007f3d1b7ff6c0 RCX: 00007f3d1cd6d04e [ 588.611568][T22618] RDX: 000000000000000f RSI: 00007f3d1b7ff0a0 RDI: 0000000000000004 [ 588.611581][T22618] RBP: 00007f3d1b7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 588.611594][T22618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.611606][T22618] R13: 00007f3d1d026038 R14: 00007f3d1d025fa0 R15: 00007ffc651f0048 [ 588.611624][T22618] [ 588.866091][ T28] audit: type=1326 audit(2000000701.772:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 588.943282][ T28] audit: type=1326 audit(2000000701.822:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 588.978590][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.025635][T22407] veth0_vlan: entered promiscuous mode [ 589.046378][T22407] veth1_vlan: entered promiscuous mode [ 589.070530][ T28] audit: type=1326 audit(2000000701.832:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d1cd6d04e code=0x7ffc0000 [ 589.096458][T22636] loop3: detected capacity change from 0 to 128 [ 589.101874][T22407] veth0_macvtap: entered promiscuous mode [ 589.128874][T22407] veth1_macvtap: entered promiscuous mode [ 589.142112][ T28] audit: type=1326 audit(2000000701.832:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 589.177364][T22636] syz.3.5203: attempt to access beyond end of device [ 589.177364][T22636] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 589.204119][T22407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.222486][T22643] qrtr: Invalid version 0 [ 589.232450][T22407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.262077][ T28] audit: type=1326 audit(2000000701.832:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 589.320188][T20610] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.331194][T20606] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.340553][T20606] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.349454][T20606] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.368439][ T28] audit: type=1326 audit(2000000701.832:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 589.399424][T22652] loop8: detected capacity change from 0 to 128 [ 589.424502][T22652] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 589.494083][T22652] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.505219][ T28] audit: type=1326 audit(2000000701.832:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 589.545753][T22663] x_tables: duplicate underflow at hook 1 [ 589.563999][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5170'. [ 589.806313][ T28] audit: type=1326 audit(2000000701.832:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 589.908951][T22678] loop7: detected capacity change from 0 to 512 [ 590.003940][T22678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.182613][ T28] audit: type=1326 audit(2000000701.832:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22622 comm="syz.3.5200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 590.219395][T22678] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 590.450021][ T28] audit: type=1400 audit(2000000701.832:5902): avc: denied { getattr } for pid=22622 comm="syz.3.5200" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=74281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 590.534692][T22678] lo speed is unknown, defaulting to 1000 [ 590.599509][T22696] erspan0: entered promiscuous mode [ 590.650920][T22700] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.5207'. [ 590.723803][T22704] x_tables: duplicate underflow at hook 1 [ 590.963027][T22716] lo speed is unknown, defaulting to 1000 [ 590.995912][T22407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.079661][T22720] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5218'. [ 591.282770][T21298] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 592.229679][T22779] lo speed is unknown, defaulting to 1000 [ 592.258981][T22785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5232'. [ 592.295054][T22788] loop7: detected capacity change from 0 to 2048 [ 592.337183][T22791] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5231'. [ 592.390065][T22788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.420512][T22788] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 16: comm syz.7.5233: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 592.826563][T22788] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #12: block 2: comm syz.7.5233: lblock 0 mapped to illegal pblock 2 (length 1) [ 592.903015][T22819] lo speed is unknown, defaulting to 1000 [ 592.958669][T22832] x_tables: duplicate underflow at hook 1 [ 593.065627][T22836] random: crng reseeded on system resumption [ 593.143857][T22407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.235595][T22851] loop3: detected capacity change from 0 to 128 [ 593.264493][T22832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5240'. [ 593.320986][T22851] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.406370][T22851] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.734995][T22893] tc_dump_action: action bad kind [ 594.079173][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.141952][T22913] loop3: detected capacity change from 0 to 512 [ 594.169252][T22917] loop8: detected capacity change from 0 to 512 [ 594.282501][T22917] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 594.316352][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5249'. [ 594.382011][T22917] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 594.407058][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 594.415350][ C1] EXT4-fs (loop8): initial error at time 2000000707: ext4_mb_generate_buddy:1317 [ 594.426011][ C1] EXT4-fs (loop8): last error at time 2000000707: ext4_mb_generate_buddy:1317 [ 594.486197][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5249'. [ 594.510424][T22917] __quota_error: 21 callbacks suppressed [ 594.510444][T22917] Quota error (device loop8): write_blk: dquota write failed [ 594.535837][T22917] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 594.546339][T22917] Quota error (device loop8): write_blk: dquota write failed [ 594.556640][T22913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.557129][T22917] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 594.640573][T22913] ext4 filesystem being mounted at /399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 594.677167][T22917] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.5247: Failed to acquire dquot type 1 [ 594.707216][T22917] loop8: lost filesystem error report for type 5 error -28 [ 594.716352][T22917] EXT4-fs (loop8): 1 truncate cleaned up [ 594.779984][T22913] lo speed is unknown, defaulting to 1000 [ 594.786816][T22917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.875583][T22913] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5246'. [ 595.014695][T22958] lo speed is unknown, defaulting to 1000 [ 595.300744][T22971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.511171][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.530053][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.571596][T22983] loop7: detected capacity change from 0 to 256 [ 595.752991][T22983] FAT-fs (loop7): Directory bread(block 64) failed [ 595.759825][T22983] FAT-fs (loop7): Directory bread(block 65) failed [ 595.766567][T22983] FAT-fs (loop7): Directory bread(block 66) failed [ 595.773189][T22983] FAT-fs (loop7): Directory bread(block 67) failed [ 595.779977][T22983] FAT-fs (loop7): Directory bread(block 68) failed [ 595.786659][T22983] FAT-fs (loop7): Directory bread(block 69) failed [ 595.793480][T22983] FAT-fs (loop7): Directory bread(block 70) failed [ 595.800633][T22983] FAT-fs (loop7): Directory bread(block 71) failed [ 595.807340][T22983] FAT-fs (loop7): Directory bread(block 72) failed [ 595.814118][T22983] FAT-fs (loop7): Directory bread(block 73) failed [ 595.873018][T22985] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 595.898869][T22985] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 595.918645][T22985] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5266'. [ 596.133152][T23005] tipc: Enabling of bearer rejected, failed to enable media [ 596.525360][T23010] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5258'. [ 597.452737][T23019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.620748][T23031] tipc: Enabled bearer , priority 0 [ 597.628742][T23030] tipc: Disabling bearer [ 597.637347][ T28] audit: type=1326 audit(2000000710.557:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23028 comm="syz.8.5274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85e088c819 code=0x0 [ 598.294929][T23048] loop3: detected capacity change from 0 to 128 [ 598.332170][T23054] cgroup: noprefix used incorrectly [ 598.352265][T23048] FAULT_INJECTION: forcing a failure. [ 598.352265][T23048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.366378][T23048] CPU: 1 UID: 0 PID: 23048 Comm: syz.3.5280 Tainted: G W syzkaller #0 PREEMPT(full) [ 598.366410][T23048] Tainted: [W]=WARN [ 598.366416][T23048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 598.366427][T23048] Call Trace: [ 598.366434][T23048] [ 598.366442][T23048] __dump_stack+0x1d/0x30 [ 598.366466][T23048] dump_stack_lvl+0x95/0xd0 [ 598.366559][T23048] dump_stack+0x15/0x1b [ 598.366577][T23048] should_fail_ex+0x263/0x280 [ 598.366628][T23048] should_fail+0xb/0x20 [ 598.366647][T23048] should_fail_usercopy+0x1a/0x20 [ 598.366670][T23048] _copy_from_user+0x1c/0xb0 [ 598.366714][T23048] io_submit_one+0x52/0x1350 [ 598.366745][T23048] __se_sys_io_submit+0xfb/0x280 [ 598.366869][T23048] __x64_sys_io_submit+0x43/0x50 [ 598.366949][T23048] x64_sys_call+0x19d5/0x3020 [ 598.366978][T23048] do_syscall_64+0x12c/0x370 [ 598.367064][T23048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.367203][T23048] RIP: 0033:0x7f3d1cdac819 [ 598.367295][T23048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.367312][T23048] RSP: 002b:00007f3d1b7de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 598.367331][T23048] RAX: ffffffffffffffda RBX: 00007f3d1d026090 RCX: 00007f3d1cdac819 [ 598.367346][T23048] RDX: 0000200000001d00 RSI: 0000000000000002 RDI: 00007f3d1cffe000 [ 598.367360][T23048] RBP: 00007f3d1b7de090 R08: 0000000000000000 R09: 0000000000000000 [ 598.367373][T23048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.367438][T23048] R13: 00007f3d1d026128 R14: 00007f3d1d026090 R15: 00007ffc651f0048 [ 598.367457][T23048] [ 598.368094][T23051] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.368555][T23048] qrtr: Invalid version 0 [ 598.379672][T23051] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.617314][T23051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.629555][T23051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.654146][T23061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5284'. [ 598.687548][T17287] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.737053][T23054] lo speed is unknown, defaulting to 1000 [ 598.744688][ T40] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.754343][ T40] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.804077][ T40] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.217705][T23072] x_tables: duplicate underflow at hook 1 [ 599.586621][T23082] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 599.601160][T23079] netlink: 'syz.3.5289': attribute type 8 has an invalid length. [ 599.651355][T23079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5289'. [ 599.684260][T23079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5289'. [ 599.805710][T23088] tipc: Enabling of bearer rejected, failed to enable media [ 599.835119][T23090] tipc: Enabling of bearer rejected, failed to enable media [ 599.874205][T23092] netlink: 'syz.3.5294': attribute type 46 has an invalid length. [ 599.898401][T23092] loop3: detected capacity change from 0 to 1024 [ 599.919792][T23095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5295'. [ 599.942151][T23092] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 599.949011][T23095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5295'. [ 599.962821][T23092] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 599.972474][T23092] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.5294: Failed to acquire dquot type 0 [ 599.983938][T23092] loop3: lost filesystem error report for type 5 error -117 [ 599.984324][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 600.000016][ C0] EXT4-fs (loop3): initial error at time 2000000712: ext4_acquire_dquot:7026 [ 600.009456][ C0] EXT4-fs (loop3): last error at time 2000000712: ext4_acquire_dquot:7026 [ 600.018927][T23092] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 600.037269][T23092] EXT4-fs (loop3): 1 truncate cleaned up [ 600.043719][T23092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.076019][T23092] lo speed is unknown, defaulting to 1000 [ 600.149622][T23108] netlink: 'syz.5.5299': attribute type 10 has an invalid length. [ 600.178014][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.428860][T23135] loop3: detected capacity change from 0 to 128 [ 600.443312][T23135] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.463843][T23135] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.502547][T23142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5312'. [ 600.541890][T23142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.848084][T23160] FAULT_INJECTION: forcing a failure. [ 600.848084][T23160] name failslab, interval 1, probability 0, space 0, times 0 [ 600.862415][T23160] CPU: 0 UID: 0 PID: 23160 Comm: syz.3.5309 Tainted: G W syzkaller #0 PREEMPT(full) [ 600.862501][T23160] Tainted: [W]=WARN [ 600.862539][T23160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 600.862550][T23160] Call Trace: [ 600.862555][T23160] [ 600.862563][T23160] __dump_stack+0x1d/0x30 [ 600.862649][T23160] dump_stack_lvl+0x95/0xd0 [ 600.862673][T23160] dump_stack+0x15/0x1b [ 600.862696][T23160] should_fail_ex+0x263/0x280 [ 600.862735][T23160] should_failslab+0x8c/0xb0 [ 600.862760][T23160] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 600.862860][T23160] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 600.862950][T23160] hugetlbfs_alloc_inode+0xbc/0x100 [ 600.863087][T23160] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 600.863119][T23160] alloc_inode+0x40/0x170 [ 600.863206][T23160] new_inode+0x1d/0xe0 [ 600.863228][T23160] hugetlbfs_get_inode+0x7b/0x380 [ 600.863258][T23160] hugetlb_file_setup+0x192/0x3d0 [ 600.863327][T23160] ksys_mmap_pgoff+0x156/0x310 [ 600.863398][T23160] x64_sys_call+0x14df/0x3020 [ 600.863424][T23160] do_syscall_64+0x12c/0x370 [ 600.863457][T23160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.863479][T23160] RIP: 0033:0x7f3d1cdac819 [ 600.863493][T23160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.863508][T23160] RSP: 002b:00007f3d1b7bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 600.863568][T23160] RAX: ffffffffffffffda RBX: 00007f3d1d026180 RCX: 00007f3d1cdac819 [ 600.863583][T23160] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 600.863597][T23160] RBP: 00007f3d1b7bd090 R08: ffffffffffffffff R09: 0000000000000000 [ 600.863612][T23160] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 600.863626][T23160] R13: 00007f3d1d026218 R14: 00007f3d1d026180 R15: 00007ffc651f0048 [ 600.863669][T23160] [ 601.605800][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5314'. [ 601.938747][T23181] loop8: detected capacity change from 0 to 128 [ 602.062618][T23185] qrtr: Invalid version 0 [ 602.081147][T23181] syz.8.5319: attempt to access beyond end of device [ 602.081147][T23181] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 602.101443][T23187] x_tables: duplicate underflow at hook 1 [ 602.142774][ T28] audit: type=1400 audit(2000000715.049:5925): avc: denied { lock } for pid=23186 comm="syz.0.5321" path="socket:[76232]" dev="sockfs" ino=76232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 602.169435][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 602.225822][T23197] loop3: detected capacity change from 0 to 128 [ 602.250325][T23197] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 602.263294][T23197] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.280650][T23197] EXT4-fs (loop3): Online defrag not supported for non-extent files [ 602.623098][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.898579][T23203] tipc: Started in network mode [ 602.904233][T23203] tipc: Node identity 000000005f0000004000000000000001, cluster identity 4711 [ 602.914164][T23203] tipc: Enabling of bearer rejected, failed to enable media [ 603.186096][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 603.246816][T23211] x_tables: duplicate underflow at hook 1 [ 603.261792][T23207] 9p: Bad value for 'rfdno' [ 603.555924][T23222] syzkaller0: entered promiscuous mode [ 603.575027][T23222] 0: reclassify loop, rule prio 0, protocol 800 [ 604.043210][T23236] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5336'. [ 604.095733][T23240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5338'. [ 604.216116][T23242] netlink: 'syz.0.5339': attribute type 31 has an invalid length. [ 604.297711][T23264] syzkaller0: entered promiscuous mode [ 604.304421][T23264] syzkaller0: entered allmulticast mode [ 604.328933][T23273] loop8: detected capacity change from 0 to 128 [ 604.419177][T23273] syz.8.5345: attempt to access beyond end of device [ 604.419177][T23273] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 604.440781][T23273] qrtr: Invalid version 0 [ 604.488796][T23283] tipc: Enabling of bearer rejected, failed to enable media [ 604.578777][ T28] audit: type=1400 audit(2000000717.490:5926): avc: denied { accept } for pid=23286 comm="syz.5.5349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 604.791302][T23293] loop7: detected capacity change from 0 to 1024 [ 604.965676][T23293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.434897][T23313] loop8: detected capacity change from 0 to 256 [ 605.556965][T23313] FAT-fs (loop8): Directory bread(block 64) failed [ 605.564258][T23313] FAT-fs (loop8): Directory bread(block 65) failed [ 605.571841][T23313] FAT-fs (loop8): Directory bread(block 66) failed [ 605.578649][T23313] FAT-fs (loop8): Directory bread(block 67) failed [ 605.585703][T23313] FAT-fs (loop8): Directory bread(block 68) failed [ 605.593014][T23313] FAT-fs (loop8): Directory bread(block 69) failed [ 605.599958][T23313] FAT-fs (loop8): Directory bread(block 70) failed [ 605.606905][T23313] FAT-fs (loop8): Directory bread(block 71) failed [ 605.614577][T23313] FAT-fs (loop8): Directory bread(block 72) failed [ 605.622124][T23313] FAT-fs (loop8): Directory bread(block 73) failed [ 605.652452][T22407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.670450][T23315] lo speed is unknown, defaulting to 1000 [ 605.762275][T23317] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5357'. [ 605.780958][T23319] x_tables: duplicate underflow at hook 1 [ 606.239330][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5363'. [ 606.288978][T23344] loop3: detected capacity change from 0 to 128 [ 606.398300][T23352] loop7: detected capacity change from 0 to 512 [ 606.485634][T23352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.571136][T23352] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.618033][ T28] audit: type=1400 audit(2000000719.531:5927): avc: denied { create } for pid=23351 comm="syz.7.5368" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 606.648271][T23366] loop3: detected capacity change from 0 to 128 [ 606.663519][T22407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.713416][T23366] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 606.763425][T23367] qrtr: Invalid version 0 [ 606.771109][T23366] syz.3.5372: attempt to access beyond end of device [ 606.771109][T23366] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 606.977068][T23377] bridge2: entered promiscuous mode [ 606.982905][T23377] bridge2: entered allmulticast mode [ 607.058757][T23386] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5379'. [ 607.085680][T23389] tmpfs: Bad value for 'mpol' [ 607.092789][T23389] tmpfs: Bad value for 'mpol' [ 607.556646][T23399] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5382'. [ 607.741501][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 608.084547][T23412] loop7: detected capacity change from 0 to 128 [ 608.125274][T23412] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 608.142009][T23412] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.406127][T23424] tipc: Enabling of bearer rejected, failed to enable media [ 609.420489][T23427] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5390'. [ 609.433981][T23433] loop8: detected capacity change from 0 to 512 [ 609.969940][T23433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.983176][T23433] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.207451][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.621766][T22407] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.741167][T23462] loop7: detected capacity change from 0 to 512 [ 635.741554][T23463] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5393'. [ 635.784414][T23461] loop3: detected capacity change from 0 to 512 [ 635.877261][T23461] EXT4-fs error (device loop3): __ext4_iget:5393: inode #11: block 1: comm syz.3.5395: invalid block [ 635.890153][T23462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.905988][T15166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 635.915720][T15166] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 635.924296][T23463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23463 comm=syz.8.5393 [ 635.947552][T23461] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 635.951573][T23461] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5395: couldn't read orphan inode 11 (err -117) [ 635.961279][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 635.961304][ C0] EXT4-fs (loop3): initial error at time 2000000748: __ext4_iget:5393: inode 11: block 1 [ 635.961342][ C0] EXT4-fs (loop3): last error at time 2000000748: __ext4_iget:5393: inode 11: block 1 [ 636.002436][T23461] loop3: lost filesystem error report for type 5 error -117 [ 636.051588][T23461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.088082][T23462] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 636.167246][T23463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.175260][T23463] IPv6: NLM_F_CREATE should be set when creating new route [ 636.244658][T23461] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.5395: Directory hole found for htree leaf block 0 [ 636.330762][T23478] lo speed is unknown, defaulting to 1000 [ 636.353904][T23462] lo speed is unknown, defaulting to 1000 [ 636.379481][T23483] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5397'. [ 636.393910][T23484] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.5394'. [ 636.754170][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.823148][T22407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.890241][T15166] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz1 [ 637.628786][T23500] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5400'. [ 637.788647][T23493] fido_id[23493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 637.861565][T23503] 9pnet_fd: Insufficient options for proto=fd [ 638.092869][ T28] audit: type=1400 audit(2000000751.027:5928): avc: denied { read } for pid=23508 comm="syz.8.5404" path="socket:[76941]" dev="sockfs" ino=76941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 638.659589][T23532] Cannot find set identified by id 0 to match [ 638.969987][T23534] loop7: detected capacity change from 0 to 512 [ 639.135380][T23548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5418'. [ 639.176977][T23547] program syz.3.5417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.197921][T23548] batman_adv: batadv0: Adding interface: ipvlan2 [ 639.217623][T23548] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.253447][T23551] loop8: detected capacity change from 0 to 128 [ 639.311043][T23534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.348234][T23554] syz.8.5419: attempt to access beyond end of device [ 639.348234][T23554] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 639.362678][T23548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.379364][T23534] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.399141][T23548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.419566][T23551] qrtr: Invalid version 0 [ 639.438483][T23548] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 639.916580][T23565] tc_dump_action: action bad kind [ 640.057975][T22407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.245075][T23573] loop7: detected capacity change from 0 to 512 [ 640.310610][T23573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.337169][T23580] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 640.458093][T23573] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.632347][T23585] tipc: Enabled bearer , priority 0 [ 640.678718][T23585] syzkaller0: entered promiscuous mode [ 640.696371][T23585] syzkaller0: entered allmulticast mode [ 640.838563][T23585] tipc: Resetting bearer [ 640.866148][T23584] tipc: Resetting bearer [ 640.901776][T23584] tipc: Disabling bearer [ 640.911122][T23597] loop3: detected capacity change from 0 to 512 [ 640.944397][T23597] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 640.990649][T23597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 641.018339][T23597] EXT4-fs error (device loop3): __ext4_iget:5393: inode #11: block 2: comm syz.3.5433: invalid block [ 641.055947][T23597] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 641.056120][T23597] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5433: couldn't read orphan inode 11 (err -117) [ 641.065668][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 641.065685][ C1] EXT4-fs (loop3): initial error at time 2000000753: __ext4_iget:5393: inode 11: block 2 [ 641.065718][ C1] EXT4-fs (loop3): last error at time 2000000753: __ext4_iget:5393: inode 11: block 2 [ 641.132775][T23602] syzkaller0: entered promiscuous mode [ 641.159988][T23602] syzkaller0: entered allmulticast mode [ 641.256216][T23597] loop3: lost filesystem error report for type 5 error -117 [ 641.256707][T23597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 641.349297][T22407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.375189][ T28] audit: type=1326 audit(2000000754.309:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 641.437129][ T28] audit: type=1326 audit(2000000754.329:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 641.461597][ T28] audit: type=1326 audit(2000000754.329:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 641.465233][T23617] loop7: detected capacity change from 0 to 164 [ 641.487502][ T28] audit: type=1326 audit(2000000754.329:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 641.546209][T23617] iso9660: Unknown parameter '@' [ 641.574619][ T28] audit: type=1326 audit(2000000754.329:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 641.650589][ T28] audit: type=1326 audit(2000000754.329:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 641.720983][ T28] audit: type=1326 audit(2000000754.329:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 641.799269][T23630] syzkaller0: entered promiscuous mode [ 641.911119][T23630] syzkaller0: entered allmulticast mode [ 641.919185][ T28] audit: type=1326 audit(2000000754.329:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 642.064064][T15166] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 642.123104][T23621] loop8: detected capacity change from 0 to 32768 [ 642.136177][ T28] audit: type=1326 audit(2000000754.329:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23596 comm="syz.3.5433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d1cdac819 code=0x7ffc0000 [ 642.343942][T23621] loop8: p1 p2 p3 < p5 p6 > [ 642.400930][T23621] loop8: p2 size 16775168 extends beyond EOD, truncated [ 642.413406][T23621] loop8: p5 start 4294970168 is beyond EOD, truncated [ 642.446098][ T1033] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 642.457839][ T3005] loop8: p1 p2 p3 < p5 p6 > [ 642.463163][ T3005] loop8: p2 size 16775168 extends beyond EOD, truncated [ 642.472138][ T3005] loop8: p5 start 4294970168 is beyond EOD, truncated [ 642.511775][T23646] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5449'. [ 642.557308][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.606606][T23466] udevd[23466]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 642.607148][T23474] udevd[23474]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 642.628257][T23468] udevd[23468]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 642.632687][T23647] udevd[23647]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 642.676407][T23650] udevd[23650]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 642.676466][T23468] udevd[23468]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 642.688209][T23647] udevd[23647]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 642.698961][T23466] udevd[23466]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 642.761107][T23656] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5452'. [ 642.979480][T23669] loop8: detected capacity change from 0 to 1024 [ 643.014902][T23669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.152298][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.209961][T23675] loop8: detected capacity change from 0 to 512 [ 643.235026][T23675] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.269593][T23675] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 643.420447][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 643.420538][ T28] audit: type=1400 audit(2000000756.350:6021): avc: denied { nlmsg_write } for pid=23681 comm="syz.5.5463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 643.464432][T23689] netlink: 'syz.7.5464': attribute type 2 has an invalid length. [ 643.508596][T23693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5465'. [ 643.541507][T23693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5465'. [ 643.673466][T23705] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5470'. [ 643.747230][T23709] loop3: detected capacity change from 0 to 512 [ 643.765074][T23709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.806998][T23709] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 643.823292][T23709] EXT4-fs error (device loop3): ext4_resize_begin:60: comm syz.3.5472: resize_inode disabled but reserved GDT blocks non-zero [ 643.926160][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.146149][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.391168][T23736] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5482'. [ 644.453697][T23739] lo speed is unknown, defaulting to 1000 [ 644.524095][T23756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 644.554141][T23740] lo speed is unknown, defaulting to 1000 [ 644.560589][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5490'. [ 644.571756][T23760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5490'. [ 644.623500][T23740] chnl_net:caif_netlink_parms(): no params data found [ 644.725482][T20602] bridge_slave_1: left allmulticast mode [ 644.731268][T20602] bridge_slave_1: left promiscuous mode [ 644.737510][T20602] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.746016][T20602] bridge_slave_0: left allmulticast mode [ 644.752487][T20602] bridge_slave_0: left promiscuous mode [ 644.758562][T20602] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.792109][T23788] netlink: 'syz.5.5502': attribute type 8 has an invalid length. [ 644.836356][T20602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.846538][T20602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.856421][T23792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5502'. [ 644.865923][T20602] bond0 (unregistering): Released all slaves [ 644.879939][T23789] tipc: Enabling of bearer rejected, failed to enable media [ 644.895022][T23788] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5502'. [ 644.953784][T20602] tipc: Left network mode [ 644.958661][T23740] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.970120][T23740] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.977968][T23740] bridge_slave_0: entered allmulticast mode [ 644.984747][T23740] bridge_slave_0: entered promiscuous mode [ 644.992596][T23740] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.999779][T23740] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.008403][T23740] bridge_slave_1: entered allmulticast mode [ 645.022432][T23740] bridge_slave_1: entered promiscuous mode [ 645.046272][T20602] hsr_slave_0: left promiscuous mode [ 645.069499][T20602] hsr_slave_1: left promiscuous mode [ 645.087965][T20602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.200961][T20602] team0 (unregistering): Port device team_slave_1 removed [ 645.211134][T20602] team0 (unregistering): Port device team_slave_0 removed [ 645.251532][T23740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.265072][T23740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.323233][T23740] team0: Port device team_slave_0 added [ 645.343169][T23740] team0: Port device team_slave_1 added [ 645.380845][T23740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.397888][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.458916][T23740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.485424][T23740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.503951][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.621658][T23740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.734662][T23740] hsr_slave_0: entered promiscuous mode [ 645.746658][T23740] hsr_slave_1: entered promiscuous mode [ 645.761952][T23740] debugfs: 'hsr0' already exists in 'hsr' [ 645.777376][T23740] Cannot create hsr debugfs directory [ 645.790840][T23838] netlink: 'syz.0.5512': attribute type 29 has an invalid length. [ 645.851927][T23838] netlink: 'syz.0.5512': attribute type 29 has an invalid length. [ 645.879667][T23843] unsupported nla_type 58 [ 646.004663][T23855] loop8: detected capacity change from 0 to 1024 [ 646.022769][T23855] EXT4-fs: Ignoring removed orlov option [ 646.054543][T23855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.092143][ T28] audit: type=1400 audit(2000000759.021:6022): avc: denied { write } for pid=23862 comm="syz.5.5516" path="socket:[78880]" dev="sockfs" ino=78880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 646.132108][ T28] audit: type=1400 audit(2000000759.021:6023): avc: denied { getopt } for pid=23862 comm="syz.5.5516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 646.196732][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.276722][T23897] x_tables: duplicate underflow at hook 1 [ 646.355900][T23740] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 646.396458][T23740] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 646.418807][T23740] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 646.451917][T23740] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 646.542605][T23740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.563442][T23740] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.595714][T20602] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.603212][T20602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.626348][T23740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 646.656976][T23740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.682333][T20602] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.689887][T20602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.728662][T23946] loop3: detected capacity change from 0 to 128 [ 646.802826][T23946] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.834966][T23946] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.010564][T23957] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.017860][T23957] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.008107][T23957] batman_adv: batadv0: Interface deactivated: dummy0 [ 648.141101][T23987] qrtr: Invalid version 0 [ 648.355619][T23957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.368546][T23957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.496492][T23740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.557311][T23964] ip6gretap0: entered promiscuous mode [ 648.578605][T23964] macvtap1: entered promiscuous mode [ 648.620659][T23964] macvtap1: entered allmulticast mode [ 648.649525][T23964] ip6gretap0: entered allmulticast mode [ 648.702989][T23964] ip6gretap0: left allmulticast mode [ 648.730701][T23964] ip6gretap0: left promiscuous mode [ 648.987539][T20613] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.039828][T20613] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.070913][T20613] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.123471][T20613] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.390311][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 649.391199][T23740] veth0_vlan: entered promiscuous mode [ 649.421399][T23740] veth1_vlan: entered promiscuous mode [ 649.463563][T23740] veth0_macvtap: entered promiscuous mode [ 649.470912][T24045] __nla_validate_parse: 3 callbacks suppressed [ 649.470925][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5545'. [ 649.491545][T23740] veth1_macvtap: entered promiscuous mode [ 649.509727][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5545'. [ 649.526248][ T28] audit: type=1326 audit(2000000762.453:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.555542][ T28] audit: type=1326 audit(2000000762.453:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.558325][T23740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.640149][T23740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.652825][ T28] audit: type=1326 audit(2000000762.453:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.661131][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.741416][ T28] audit: type=1326 audit(2000000762.453:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.781922][ T28] audit: type=1326 audit(2000000762.453:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.821896][ T28] audit: type=1326 audit(2000000762.453:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.849127][ T28] audit: type=1326 audit(2000000762.463:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.905079][ T28] audit: type=1326 audit(2000000762.463:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 649.975659][T24071] loop3: detected capacity change from 0 to 4096 [ 650.022072][T24071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.039903][ T28] audit: type=1326 audit(2000000762.493:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 650.332420][ T28] audit: type=1326 audit(2000000762.493:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24026 comm="syz.5.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 650.379526][T24082] loop8: detected capacity change from 0 to 1024 [ 650.435418][ T40] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.510095][T24082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.616059][T24062] lo speed is unknown, defaulting to 1000 [ 650.625974][ T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.675919][ T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.840337][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.856329][T24102] program syz.8.5555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.938493][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.042880][T24120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5557'. [ 652.199294][T24144] loop3: detected capacity change from 0 to 128 [ 652.244375][T24144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.278546][T24152] loop9: detected capacity change from 0 to 128 [ 652.308266][T24144] ext4 filesystem being mounted at /457/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.346249][T24152] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.381357][T24152] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 652.583866][T24169] random: crng reseeded on system resumption [ 652.780504][T24167] lo speed is unknown, defaulting to 1000 [ 653.284478][ T40] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.321992][T24187] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5571'. [ 653.341784][ T40] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.389966][T24191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=24191 comm=syz.8.5571 [ 653.441538][ T40] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.477531][ T40] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.516673][T24191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36434 sclass=netlink_route_socket pid=24191 comm=syz.8.5571 [ 653.637564][T24200] tipc: Enabling of bearer rejected, failed to enable media [ 653.775436][T24214] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5577'. [ 653.961653][T24222] syzkaller0: entered promiscuous mode [ 653.996058][T24222] syzkaller0: entered allmulticast mode [ 654.132301][T24230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5581'. [ 654.215231][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 654.310936][T23740] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 654.338534][T24253] xt_hashlimit: size too large, truncated to 1048576 [ 654.719843][T24292] syzkaller0: entered promiscuous mode [ 654.728897][T24292] syzkaller0: entered allmulticast mode [ 654.796606][T24298] loop3: detected capacity change from 0 to 256 [ 654.815756][T24298] FAT-fs (loop3): Directory bread(block 64) failed [ 654.822587][T24298] FAT-fs (loop3): Directory bread(block 65) failed [ 654.829238][T24298] FAT-fs (loop3): Directory bread(block 66) failed [ 654.836394][T24298] FAT-fs (loop3): Directory bread(block 67) failed [ 654.843967][T24298] FAT-fs (loop3): Directory bread(block 68) failed [ 654.852525][T24298] FAT-fs (loop3): Directory bread(block 69) failed [ 654.860505][T24298] FAT-fs (loop3): Directory bread(block 70) failed [ 654.868931][T24298] FAT-fs (loop3): Directory bread(block 71) failed [ 654.876329][T24298] FAT-fs (loop3): Directory bread(block 72) failed [ 654.885180][T24298] FAT-fs (loop3): Directory bread(block 73) failed [ 655.697840][T24338] tipc: Started in network mode [ 655.720709][T24338] tipc: Node identity 000000005f0000004000000000000001, cluster identity 4711 [ 655.760428][T24338] tipc: Enabling of bearer rejected, failed to enable media [ 655.906735][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 655.906751][ T28] audit: type=1326 audit(2000000768.806:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.005127][ T28] audit: type=1326 audit(2000000768.806:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.080969][ T28] audit: type=1326 audit(2000000768.806:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.155921][ T28] audit: type=1326 audit(2000000768.806:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.180983][ T28] audit: type=1326 audit(2000000768.806:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.207621][ T28] audit: type=1326 audit(2000000768.806:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.232711][ T28] audit: type=1326 audit(2000000768.806:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.338882][ T28] audit: type=1326 audit(2000000768.806:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.380600][ T28] audit: type=1326 audit(2000000768.806:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.431438][T24384] netlink: 'syz.5.5615': attribute type 21 has an invalid length. [ 656.448541][ T28] audit: type=1326 audit(2000000768.806:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24344 comm="syz.5.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd8d2c819 code=0x7ffc0000 [ 656.501115][T24395] loop8: detected capacity change from 0 to 128 [ 656.601747][T24404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 656.652276][T24404] netlink: 'syz.0.5618': attribute type 8 has an invalid length. [ 656.676626][T24404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5618'. [ 656.696742][T24404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5618'. [ 656.797056][T24428] loop8: detected capacity change from 0 to 512 [ 656.811407][T24428] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.856091][T24428] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 657.491841][T24455] tipc: Enabling of bearer rejected, failed to enable media [ 657.536041][T24457] lo speed is unknown, defaulting to 1000 [ 657.573999][T24460] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5637'. [ 657.583671][T24460] tipc: Invalid UDP bearer configuration [ 657.583684][T24460] tipc: Enabling of bearer rejected, failed to enable media [ 657.614565][T24462] loop3: detected capacity change from 0 to 512 [ 657.649114][T24463] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5636'. [ 657.669245][T21298] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.892641][T24487] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 657.904958][T24487] netlink: 'syz.0.5647': attribute type 8 has an invalid length. [ 657.924420][T24487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5647'. [ 657.936852][T24487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5647'. [ 658.065092][T20602] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.100978][T20602] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.190633][T20602] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.221983][T20602] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.299570][T20602] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.321084][T20602] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.469555][T20602] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.491320][T20602] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.777775][T24517] tipc: Enabling of bearer rejected, failed to enable media [ 658.899478][T20602] bridge_slave_1: left allmulticast mode [ 658.941441][T20602] bridge_slave_1: left promiscuous mode [ 658.993439][T20602] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.043857][T20602] bridge_slave_0: left allmulticast mode [ 659.072093][T20602] bridge_slave_0: left promiscuous mode [ 659.096679][T20602] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.377906][T20602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.393581][T20602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.406252][T20602] bond0 (unregistering): Released all slaves [ 659.435840][T24490] lo speed is unknown, defaulting to 1000 [ 659.477370][T20602] tipc: Left network mode [ 659.506410][T20602] dummy0: left promiscuous mode [ 659.624071][T20602] team0: left promiscuous mode [ 659.664472][T20602] team_slave_0: left promiscuous mode [ 660.654073][T20602] team_slave_1: left promiscuous mode [ 661.039812][T20602] hsr_slave_0: left promiscuous mode [ 661.083591][T20602] hsr_slave_1: left promiscuous mode [ 661.102143][T20602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.110479][T20602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.119727][T20602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.135021][T20602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.156454][T20602] veth1_macvtap: left promiscuous mode [ 661.162557][T20602] veth0_macvtap: left promiscuous mode [ 661.169977][T20602] veth1_vlan: left promiscuous mode [ 661.176463][T20602] veth0_vlan: left promiscuous mode [ 661.222244][T24562] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5669'. [ 661.263879][T20602] team0 (unregistering): Port device team_slave_1 removed [ 661.287315][T20602] team0 (unregistering): Port device team_slave_0 removed [ 661.501353][ T28] kauditd_printk_skb: 438 callbacks suppressed [ 661.501369][ T28] audit: type=1400 audit(2000000774.439:6553): avc: denied { setopt } for pid=24575 comm="syz.9.5673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 661.548347][T24490] chnl_net:caif_netlink_parms(): no params data found [ 661.578076][T24588] x_tables: duplicate underflow at hook 1 [ 661.653272][T24595] loop3: detected capacity change from 0 to 128 [ 661.802490][T24595] qrtr: Invalid version 0 [ 661.863198][T24490] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.870509][T24490] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.894631][T24490] bridge_slave_0: entered allmulticast mode [ 661.913917][T24490] bridge_slave_0: entered promiscuous mode [ 661.937035][T24490] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.960005][T24490] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.985779][T24490] bridge_slave_1: entered allmulticast mode [ 662.006145][T24490] bridge_slave_1: entered promiscuous mode [ 662.075375][T24490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.029335][T24490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.074339][T24490] team0: Port device team_slave_0 added [ 663.081265][T24490] team0: Port device team_slave_1 added [ 663.098688][T24490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.105884][T24490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.156727][T24490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.182487][T24490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.200237][T24490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.237510][T24490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.307662][T24660] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5690'. [ 663.330957][T24666] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 663.332487][T24490] hsr_slave_0: entered promiscuous mode [ 663.358368][T24666] netlink: 'syz.0.5691': attribute type 8 has an invalid length. [ 663.386687][T24490] hsr_slave_1: entered promiscuous mode [ 663.405601][T24490] debugfs: 'hsr0' already exists in 'hsr' [ 663.425029][T24490] Cannot create hsr debugfs directory [ 663.435103][T24679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5691'. [ 663.485800][T24684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5691'. [ 664.852017][T24490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 665.249057][T24490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 665.274332][T24726] loop9: detected capacity change from 0 to 512 [ 665.285557][T24490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 665.328265][T24490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 665.339185][T24726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.373945][T24726] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.483932][T24490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.525516][T24490] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.545560][T20613] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.552812][T20613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.588797][T24490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 665.620034][T24490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.682324][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.727516][T20613] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.735172][T20613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.946531][T24807] siw: device registration error -23 [ 665.955846][ T28] audit: type=1400 audit(2000000778.901:6554): avc: denied { getopt } for pid=24806 comm="syz.9.5705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 666.034398][T24490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.036947][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5707'. [ 666.073232][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5707'. [ 666.510862][T24849] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5710'. [ 666.764025][T24490] veth0_vlan: entered promiscuous mode [ 666.780572][T24490] veth1_vlan: entered promiscuous mode [ 666.961256][T24490] veth0_macvtap: entered promiscuous mode [ 666.968591][T24490] veth1_macvtap: entered promiscuous mode [ 666.979608][T24490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.989327][T24490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.068087][ T321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.115176][ T321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.186438][ T321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.199874][T24868] loop9: detected capacity change from 0 to 512 [ 667.221027][ T321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.302742][T24868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.353124][T24877] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5716'. [ 667.369714][T24868] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 667.422688][T24877] tipc: Invalid UDP bearer configuration [ 667.422702][T24877] tipc: Enabling of bearer rejected, failed to enable media [ 667.514645][T24868] lo speed is unknown, defaulting to 1000 [ 667.532921][T24886] loop1: detected capacity change from 0 to 512 [ 667.637009][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5717'. [ 667.678474][T24886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.779571][T24886] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 667.842442][T24868] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.5715'. [ 668.057323][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.100602][T24886] lo speed is unknown, defaulting to 1000 [ 668.142835][T24917] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5649'. [ 668.186598][T24923] loop9: detected capacity change from 0 to 128 [ 668.459674][T24935] qrtr: Invalid version 0 [ 668.543854][T24936] lo speed is unknown, defaulting to 1000 [ 668.612875][T24939] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5722'. [ 668.711886][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.756493][T24923] syz.9.5720: attempt to access beyond end of device [ 668.756493][T24923] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 668.904023][T24965] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5728'. [ 668.962520][T24972] loop3: detected capacity change from 0 to 512 [ 669.004672][T24972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.073051][T24972] ext4 filesystem being mounted at /485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 669.197927][T24988] lo speed is unknown, defaulting to 1000 [ 669.220234][T24993] random: crng reseeded on system resumption [ 669.237177][T24972] lo speed is unknown, defaulting to 1000 [ 669.280079][T24996] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5730'. [ 669.300317][T25001] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5734'. [ 669.320123][T24954] loop1: detected capacity change from 0 to 256 [ 669.433054][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.451696][T25022] loop9: detected capacity change from 0 to 512 [ 669.471339][T25026] loop3: detected capacity change from 0 to 512 [ 669.515170][T25026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.540328][T25026] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.553028][T25022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.580862][T25022] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 669.677215][T25042] x_tables: duplicate underflow at hook 1 [ 669.696222][T25022] lo speed is unknown, defaulting to 1000 [ 669.727516][T25048] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.5739'. [ 669.773665][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.804309][T25052] tc_dump_action: action bad kind [ 670.739394][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.825322][T25080] random: crng reseeded on system resumption [ 671.461969][T25090] tipc: Enabling of bearer rejected, failed to enable media [ 672.757266][T25107] random: crng reseeded on system resumption [ 674.162816][T25149] tc_dump_action: action bad kind [ 674.940296][T25161] lo speed is unknown, defaulting to 1000 [ 675.030592][T25163] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5758'. [ 675.376672][T25177] netlink: 'syz.3.5762': attribute type 19 has an invalid length. [ 675.390157][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5762'. [ 675.414441][T25181] loop3: detected capacity change from 0 to 128 [ 675.426661][T25181] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 675.439808][T25181] ext4 filesystem being mounted at /493/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.659491][T25185] random: crng reseeded on system resumption [ 675.964694][T25195] loop1: detected capacity change from 0 to 1024 [ 676.028368][T25195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 676.170417][T25200] loop9: detected capacity change from 0 to 128 [ 676.361301][T25200] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 676.392443][T25200] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.349191][T25195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.365620][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 677.368881][T25210] random: crng reseeded on system resumption [ 677.495049][T25218] syz_tun: entered promiscuous mode [ 677.811630][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.822054][ T28] audit: type=1400 audit(2000000790.767:6555): avc: denied { unmount } for pid=24490 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 678.184409][T25223] loop3: detected capacity change from 0 to 512 [ 678.191492][T25223] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 678.257959][T25226] lo speed is unknown, defaulting to 1000 [ 678.342425][T25226] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5776'. [ 678.757238][T25243] loop3: detected capacity change from 0 to 128 [ 678.781556][T23740] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 678.794230][T25243] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.816933][T25243] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.945920][T25251] 9pnet_fd: p9_fd_create_unix (25251): problem connecting socket: ./file0: -111 [ 679.008854][ T28] audit: type=1400 audit(2000000791.967:6556): avc: denied { execute } for pid=25250 comm="syz.5.5785" path="pipe:[83296]" dev="pipefs" ino=83296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 679.060568][T25257] random: crng reseeded on system resumption [ 680.415569][T25269] loop1: detected capacity change from 0 to 256 [ 680.527189][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5789'. [ 680.828766][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5789'. [ 680.839536][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5789'. [ 680.900920][T25269] FAT-fs (loop1): Directory bread(block 64) failed [ 680.907864][T25269] FAT-fs (loop1): Directory bread(block 65) failed [ 680.915000][T25269] FAT-fs (loop1): Directory bread(block 66) failed [ 680.921733][T25269] FAT-fs (loop1): Directory bread(block 67) failed [ 680.928941][T25269] FAT-fs (loop1): Directory bread(block 68) failed [ 680.935926][T25269] FAT-fs (loop1): Directory bread(block 69) failed [ 680.943122][T25269] FAT-fs (loop1): Directory bread(block 70) failed [ 680.950026][T25269] FAT-fs (loop1): Directory bread(block 71) failed [ 680.956796][T25269] FAT-fs (loop1): Directory bread(block 72) failed [ 680.963633][T25269] FAT-fs (loop1): Directory bread(block 73) failed [ 680.984675][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 681.224496][T25276] gretap2: entered promiscuous mode [ 681.230168][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5790'. [ 681.272620][T25278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5790'. [ 681.282156][T25276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=25276 comm=syz.5.5791 [ 681.584867][T25284] tipc: Enabling of bearer rejected, failed to enable media [ 682.556228][T25298] loop9: detected capacity change from 0 to 512 [ 682.601438][T25302] tipc: Invalid UDP bearer configuration [ 682.601451][T25302] tipc: Enabling of bearer rejected, failed to enable media [ 682.630862][T25298] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.659261][T25298] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.807128][T25310] loop3: detected capacity change from 0 to 512 [ 682.820439][T25311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.843738][T25313] x_tables: duplicate underflow at hook 1 [ 682.875598][T25310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.890556][T25310] ext4 filesystem being mounted at /505/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 682.947153][T25323] veth1_to_bridge: entered allmulticast mode [ 682.957139][T25310] lo speed is unknown, defaulting to 1000 [ 683.045445][T25340] loop1: detected capacity change from 0 to 128 [ 683.050992][T25310] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5802'. [ 683.095559][T25340] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 683.119124][T25340] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.767348][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.658811][T25372] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5816'. [ 685.129012][T24490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 685.258264][T25397] gretap0: entered promiscuous mode [ 685.303210][T25397] vlan2: entered promiscuous mode [ 685.341881][ T28] audit: type=1400 audit(2000000798.280:6557): avc: denied { getopt } for pid=25398 comm="syz.5.5821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 685.539470][T25403] syzkaller0: entered promiscuous mode [ 685.546932][T25403] syzkaller0: entered allmulticast mode [ 685.588937][T25410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.621302][T25412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5825'. [ 685.632138][T25412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5825'. [ 685.665589][T25416] FAULT_INJECTION: forcing a failure. [ 685.665589][T25416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.689189][T25416] CPU: 1 UID: 0 PID: 25416 Comm: syz.1.5827 Tainted: G W syzkaller #0 PREEMPT(full) [ 685.689217][T25416] Tainted: [W]=WARN [ 685.689222][T25416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 685.689234][T25416] Call Trace: [ 685.689240][T25416] [ 685.689247][T25416] __dump_stack+0x1d/0x30 [ 685.689297][T25416] dump_stack_lvl+0x95/0xd0 [ 685.689315][T25416] dump_stack+0x15/0x1b [ 685.689333][T25416] should_fail_ex+0x263/0x280 [ 685.689355][T25416] should_fail+0xb/0x20 [ 685.689414][T25416] should_fail_usercopy+0x1a/0x20 [ 685.689437][T25416] _copy_from_iter+0xcf/0xea0 [ 685.689515][T25416] ? __alloc_skb+0x4f6/0x690 [ 685.689540][T25416] ? __alloc_skb+0x200/0x690 [ 685.689617][T25416] netlink_sendmsg+0x4ae/0x6f0 [ 685.689638][T25416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.689674][T25416] ____sys_sendmsg+0x563/0x5b0 [ 685.689696][T25416] ___sys_sendmsg+0x195/0x1e0 [ 685.689720][T25416] __x64_sys_sendmsg+0xd4/0x160 [ 685.689738][T25416] x64_sys_call+0x194c/0x3020 [ 685.689783][T25416] do_syscall_64+0x12c/0x370 [ 685.689806][T25416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.689827][T25416] RIP: 0033:0x7fee6442c819 [ 685.689843][T25416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.689861][T25416] RSP: 002b:00007fee62e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.689955][T25416] RAX: ffffffffffffffda RBX: 00007fee646a5fa0 RCX: 00007fee6442c819 [ 685.689968][T25416] RDX: 0000000000004084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 685.690027][T25416] RBP: 00007fee62e7f090 R08: 0000000000000000 R09: 0000000000000000 [ 685.690040][T25416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.690052][T25416] R13: 00007fee646a6038 R14: 00007fee646a5fa0 R15: 00007ffd719ac948 [ 685.690143][T25416] [ 685.772938][T25427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.903787][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.906718][T25435] loop1: detected capacity change from 0 to 128 [ 685.942972][T25427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.985949][T25435] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 686.025622][T25435] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.115344][T25460] lo speed is unknown, defaulting to 1000 [ 686.190546][T25473] loop3: detected capacity change from 0 to 512 [ 686.207527][T25473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.221297][T25473] ext4 filesystem being mounted at /512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 686.482613][T25485] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5844'. [ 686.687760][T25473] lo speed is unknown, defaulting to 1000 [ 686.719724][T25492] loop9: detected capacity change from 0 to 128 [ 686.964103][T25508] loop9: detected capacity change from 0 to 128 [ 687.161295][T25508] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 687.708498][T24490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 687.738854][T25508] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.025575][T25527] random: crng reseeded on system resumption [ 689.250343][T25536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.345603][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.465176][T25544] loop3: detected capacity change from 0 to 128 [ 689.492502][T25544] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 689.507643][T25544] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.217096][T23740] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.938099][T25559] loop9: detected capacity change from 0 to 128 [ 691.544108][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 691.698545][T25577] loop1: detected capacity change from 0 to 256 [ 691.747506][T25577] FAT-fs (loop1): Directory bread(block 64) failed [ 691.754308][T25577] FAT-fs (loop1): Directory bread(block 65) failed [ 691.760975][T25577] FAT-fs (loop1): Directory bread(block 66) failed [ 691.767505][T25577] FAT-fs (loop1): Directory bread(block 67) failed [ 691.774530][T25577] FAT-fs (loop1): Directory bread(block 68) failed [ 691.781273][T25577] FAT-fs (loop1): Directory bread(block 69) failed [ 691.788147][T25577] FAT-fs (loop1): Directory bread(block 70) failed [ 691.794826][T25577] FAT-fs (loop1): Directory bread(block 71) failed [ 691.801662][T25577] FAT-fs (loop1): Directory bread(block 72) failed [ 691.808497][T25577] FAT-fs (loop1): Directory bread(block 73) failed [ 691.856997][T25579] qrtr: Invalid version 0 [ 691.892475][T25573] syz.9.5862: attempt to access beyond end of device [ 691.892475][T25573] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 692.343313][T25583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9974 sclass=netlink_route_socket pid=25583 comm=syz.5.5871 [ 693.335551][ T321] bridge_slave_1: left allmulticast mode [ 693.354037][ T321] bridge_slave_1: left promiscuous mode [ 693.368077][T25598] loop9: detected capacity change from 0 to 512 [ 693.377698][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.407436][T25598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.424941][ T321] bridge_slave_0: left promiscuous mode [ 693.433070][T25603] FAULT_INJECTION: forcing a failure. [ 693.433070][T25603] name failslab, interval 1, probability 0, space 0, times 0 [ 693.452575][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.472039][T25598] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.482881][T25603] CPU: 1 UID: 0 PID: 25603 Comm: syz.3.5875 Tainted: G W syzkaller #0 PREEMPT(full) [ 693.482912][T25603] Tainted: [W]=WARN [ 693.482983][T25603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 693.483034][T25603] Call Trace: [ 693.483042][T25603] [ 693.483051][T25603] __dump_stack+0x1d/0x30 [ 693.483090][T25603] dump_stack_lvl+0x95/0xd0 [ 693.483155][T25603] dump_stack+0x15/0x1b [ 693.483235][T25603] should_fail_ex+0x263/0x280 [ 693.483264][T25603] should_failslab+0x8c/0xb0 [ 693.483332][T25603] kmem_cache_alloc_noprof+0x66/0x400 [ 693.483407][T25603] ? skb_clone+0x151/0x1f0 [ 693.483430][T25603] skb_clone+0x151/0x1f0 [ 693.483449][T25603] __netlink_deliver_tap+0x2c9/0x500 [ 693.483473][T25603] netlink_unicast+0x66b/0x690 [ 693.483529][T25603] netlink_sendmsg+0x5c8/0x6f0 [ 693.483552][T25603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.483573][T25603] ____sys_sendmsg+0x563/0x5b0 [ 693.483658][T25603] ___sys_sendmsg+0x195/0x1e0 [ 693.483689][T25603] __x64_sys_sendmsg+0xd4/0x160 [ 693.483713][T25603] x64_sys_call+0x194c/0x3020 [ 693.483746][T25603] do_syscall_64+0x12c/0x370 [ 693.483770][T25603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.483788][T25603] RIP: 0033:0x7f3d1cdac819 [ 693.483804][T25603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.483822][T25603] RSP: 002b:00007f3d1b7ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.483888][T25603] RAX: ffffffffffffffda RBX: 00007f3d1d025fa0 RCX: 00007f3d1cdac819 [ 693.483903][T25603] RDX: 0000000000004084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 693.483956][T25603] RBP: 00007f3d1b7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 693.483968][T25603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.483981][T25603] R13: 00007f3d1d026038 R14: 00007f3d1d025fa0 R15: 00007ffc651f0048 [ 693.484027][T25603] [ 693.709962][T25605] loop3: detected capacity change from 0 to 512 [ 693.720480][T25605] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.5876: inode has both inline data and extents flags [ 693.753903][T25605] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 693.753988][T25605] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5876: couldn't read orphan inode 15 (err -117) [ 693.763816][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 693.763838][ C1] EXT4-fs (loop3): initial error at time 2000000806: ext4_orphan_get:1397: inode 15 [ 693.763873][ C1] EXT4-fs (loop3): last error at time 2000000806: ext4_orphan_get:1397: inode 15 [ 693.816508][T25605] loop3: lost filesystem error report for type 5 error -117 [ 693.817090][T25605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000400000000 r/w without journal. Quota mode: writeback. [ 694.226276][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000400000000. [ 694.249984][ T23] SELinux: failure in sel_netif_sid_slow(), invalid network interface (110) [ 694.340306][ T3418] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 694.367600][ T321] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 694.553285][T25626] loop3: detected capacity change from 0 to 1024 [ 694.596541][T25626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.723442][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.779699][ T321] bond2 (unregistering): (slave bridge7): Releasing active interface [ 695.040113][ T321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.051809][ T321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.061996][ T321] bond0 (unregistering): Released all slaves [ 695.071874][ T321] bond1 (unregistering): Released all slaves [ 695.084690][ T321] bond2 (unregistering): Released all slaves [ 695.124560][ T321] bond3 (unregistering): Released all slaves [ 695.136192][T25608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.162386][T25565] lo speed is unknown, defaulting to 1000 [ 695.285532][T25565] chnl_net:caif_netlink_parms(): no params data found [ 695.310844][ T321] tipc: Left network mode [ 695.323783][ T321] dummy0: left promiscuous mode [ 695.335466][ T321] team0: left promiscuous mode [ 695.344446][ T321] team_slave_0: left promiscuous mode [ 695.354849][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.374663][ T321] team_slave_1: left promiscuous mode [ 695.430415][ T321] hsr_slave_0: left promiscuous mode [ 695.458708][ T321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.491734][ T321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.540648][T25659] loop3: detected capacity change from 0 to 128 [ 695.578879][T25661] loop9: detected capacity change from 0 to 512 [ 695.594548][T25659] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 695.608199][T25663] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 695.620595][T25661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.639864][T25663] netlink: 'syz.1.5889': attribute type 8 has an invalid length. [ 695.650845][T25659] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.672214][T25661] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 695.780013][T25666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5889'. [ 695.951413][T25668] random: crng reseeded on system resumption [ 695.986952][T25669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5889'. [ 696.907892][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.956151][ T321] team0 (unregistering): Port device team_slave_1 removed [ 696.970041][T25679] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 696.977101][ T321] team0 (unregistering): Port device team_slave_0 removed [ 697.175317][T25700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 697.566005][ T10] lo speed is unknown, defaulting to 1000 [ 697.572228][ T10] infiniband syz0: ib_query_port failed (-19) [ 697.572868][T14689] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 697.594910][T25676] bond1: entered allmulticast mode [ 697.620210][T25680] bridge1: entered promiscuous mode [ 697.626108][T25680] bridge1: entered allmulticast mode [ 697.633167][T25680] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 697.657546][T25737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5896'. [ 697.684544][T25737] loop3: detected capacity change from 0 to 764 [ 697.706037][T25737] loop3: detected capacity change from 0 to 764 [ 697.736615][T25565] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.745526][T25565] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.753117][T25565] bridge_slave_0: entered allmulticast mode [ 697.762771][T25565] bridge_slave_0: entered promiscuous mode [ 697.770451][T25750] loop1: detected capacity change from 0 to 512 [ 697.777575][T25750] EXT4-fs: Ignoring removed bh option [ 697.793966][T25750] EXT4-fs: Ignoring removed mblk_io_submit option [ 697.806472][T25565] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.817868][T25565] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.830597][T25565] bridge_slave_1: entered allmulticast mode [ 697.837570][T25565] bridge_slave_1: entered promiscuous mode [ 697.838748][T25750] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 697.854688][T25565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.858293][T25750] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 697.873430][T25750] EXT4-fs (loop1): orphan cleanup on readonly fs [ 697.881361][T25750] Quota error (device loop1): v2_read_file_info: Free block number 12 out of range (1, 6). [ 697.895501][T25750] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 697.913003][T25565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.923851][T25750] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 697.934032][T25565] team0: Port device team_slave_0 added [ 697.946549][T25565] team0: Port device team_slave_1 added [ 697.960205][T25750] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.5899: Invalid block bitmap block 0 in block_group 0 [ 697.962765][T25565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.974716][T25750] loop1: lost filesystem error report for type 5 error -117 [ 697.982186][T25750] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 697.983680][T25565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.990988][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 697.991005][ C0] EXT4-fs (loop1): last error at time 2000000810: ext4_read_block_bitmap_nowait:483 [ 698.039851][T25750] loop1: lost filesystem error report for type 5 error -117 [ 698.045416][T25763] loop9: detected capacity change from 0 to 128 [ 698.045983][T25565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.055656][T25750] EXT4-fs (loop1): 1 orphan inode deleted [ 698.063037][T25565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.092975][T25750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 698.130170][T25763] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5902'. [ 698.190397][T25565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.218405][T25565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.232811][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.392993][T25565] hsr_slave_0: entered promiscuous mode [ 698.401950][T25565] hsr_slave_1: entered promiscuous mode [ 698.557991][T25779] loop1: detected capacity change from 0 to 512 [ 698.570948][T25779] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 698.600044][T25779] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 698.616937][T25779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 698.626563][T25779] System zones: 0-2, 18-18, 34-34 [ 698.634149][T25779] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.5907: bad orphan inode 15 [ 698.644959][T25779] loop1: lost filesystem error report for type 5 error -117 [ 698.645124][T25779] ext4_test_bit(bit=14, block=18) = 1 [ 698.658201][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 698.658224][ C0] EXT4-fs (loop1): initial error at time 2000000811: ext4_orphan_get:1423 [ 698.658247][ C0] EXT4-fs (loop1): last error at time 2000000811: ext4_orphan_get:1423 [ 698.683522][T25779] is_bad_inode(inode)=0 [ 698.689604][T25779] NEXT_ORPHAN(inode)=2264924160 [ 698.695914][T25779] max_ino=32 [ 698.699612][T25779] i_nlink=0 [ 698.710038][T25779] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #15: comm syz.1.5907: corrupted inode contents [ 698.725091][T25779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 698.725240][T25779] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #15: comm syz.1.5907: mark_inode_dirty error [ 698.747673][T25779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 698.747832][T25779] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #15: comm syz.1.5907: corrupted inode contents [ 698.778428][T25779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 698.778697][T25779] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.5907: mark_inode_dirty error [ 698.806896][T25779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 698.848284][T25820] x_tables: duplicate underflow at hook 1 [ 698.870272][T25779] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.5907: mark inode dirty (error -117) [ 698.871351][T25823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25823 comm=syz.9.5909 [ 698.884666][T25779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 698.923968][T25565] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 698.940592][T25823] loop9: detected capacity change from 0 to 1024 [ 698.947742][T25779] EXT4-fs warning (device loop1): ext4_evict_inode:285: xattr delete (err -117) [ 698.967569][T25823] EXT4-fs: dax option not supported [ 698.978434][T25565] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 698.996253][T25779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.025235][T25565] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 699.036292][T25565] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 699.058281][T25837] netlink: 'syz.9.5909': attribute type 13 has an invalid length. [ 699.365731][T25867] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5907: bg 0: block 80: padding at end of block bitmap is not set [ 699.389478][T25867] ext4: Unknown parameter '184467440737095516150xffffffffffffffff0xffffffffffffffff5q+-aRw ǔ&hӉ84' [ 699.618906][T25837] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.626368][T25837] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.680101][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.758125][T25837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.780752][T25837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.855617][T25871] tipc: Enabling of bearer rejected, failed to enable media [ 699.892941][ T1605] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.928489][ T1605] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.972591][ T1605] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.291349][T25895] netlink: 'syz.5.5923': attribute type 8 has an invalid length. [ 700.295610][ T1605] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.345046][T25895] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5923'. [ 700.372521][T25565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.398243][T25905] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5923'. [ 700.487930][T25565] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.505394][T25910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.561422][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.568699][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.605072][T25910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.695284][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.702444][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.728657][T25928] tipc: Invalid UDP bearer configuration [ 700.728671][T25928] tipc: Enabling of bearer rejected, failed to enable media [ 700.868956][T25565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.927127][ T28] audit: type=1326 audit(2000000001.510:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 700.989962][ T28] audit: type=1326 audit(2000000001.530:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.032920][T25565] veth0_vlan: entered promiscuous mode [ 701.050425][ T28] audit: type=1326 audit(2000000001.530:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.054392][T25565] veth1_vlan: entered promiscuous mode [ 701.112131][ T28] audit: type=1326 audit(2000000001.530:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.119439][T25565] veth0_macvtap: entered promiscuous mode [ 701.150327][T25977] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5938'. [ 701.159803][ T28] audit: type=1326 audit(2000000001.530:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.177855][T25565] veth1_macvtap: entered promiscuous mode [ 701.209477][T25565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.217325][ T28] audit: type=1326 audit(2000000001.530:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.237999][T25565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.250387][ T28] audit: type=1326 audit(2000000001.530:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.283201][ T28] audit: type=1326 audit(2000000001.530:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.287211][T20610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.323189][ T28] audit: type=1326 audit(2000000001.530:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25935 comm="syz.9.5931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413a2ac819 code=0x7ffc0000 [ 701.363789][T20610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.372609][T20610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.399267][T25996] loop1: detected capacity change from 0 to 1024 [ 701.423065][T20610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.439196][T25996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.459440][T26001] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5940'. [ 701.481560][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.535070][T26011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5944'. [ 701.608010][T26019] ip6erspan0: entered allmulticast mode [ 701.705482][T26031] tipc: Enabling of bearer rejected, failed to enable media [ 701.758066][T26034] loop1: detected capacity change from 0 to 512 [ 701.773902][T26036] loop3: detected capacity change from 0 to 512 [ 701.798109][T26036] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.5950: inode has both inline data and extents flags [ 701.834132][T26036] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 701.835851][T26034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.835864][T26036] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5950: couldn't read orphan inode 15 (err -117) [ 701.835911][T26036] loop3: lost filesystem error report for type 5 error -117 [ 701.845248][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 701.845265][ C1] EXT4-fs (loop3): initial error at time 2000000002: ext4_orphan_get:1397: inode 15 [ 701.845291][ C1] EXT4-fs (loop3): last error at time 2000000002: ext4_orphan_get:1397: inode 15 [ 701.848750][T26034] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 701.861175][T26036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.963161][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.975179][T26051] loop9: detected capacity change from 0 to 512 [ 702.502547][T26071] EXT4-fs: Ignoring removed nobh option [ 702.563049][T26071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.581820][T26071] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.598925][T26071] Option ' W' to dns_resolver key: bad/missing value [ 702.629925][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.640323][T26081] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5963'. [ 702.672900][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.922956][T26095] set_capacity_and_notify: 1 callbacks suppressed [ 702.922992][T26095] loop9: detected capacity change from 0 to 256 [ 703.066232][T26095] FAT-fs (loop9): Directory bread(block 64) failed [ 703.073248][T26095] FAT-fs (loop9): Directory bread(block 65) failed [ 703.080485][T26095] FAT-fs (loop9): Directory bread(block 66) failed [ 703.087284][T26095] FAT-fs (loop9): Directory bread(block 67) failed [ 703.094129][T26095] FAT-fs (loop9): Directory bread(block 68) failed [ 703.101098][T26095] FAT-fs (loop9): Directory bread(block 69) failed [ 703.107799][T26095] FAT-fs (loop9): Directory bread(block 70) failed [ 703.114950][T26095] FAT-fs (loop9): Directory bread(block 71) failed [ 703.121919][T26095] FAT-fs (loop9): Directory bread(block 72) failed [ 703.128780][T26095] FAT-fs (loop9): Directory bread(block 73) failed [ 703.317946][T26088] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.5962'. [ 703.771282][T26113] loop1: detected capacity change from 0 to 512 [ 703.813767][T26113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.836028][T26113] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 704.260489][T26123] tipc: Enabling of bearer rejected, failed to enable media [ 704.275140][T26125] netlink: 'syz.0.5974': attribute type 13 has an invalid length. [ 704.286089][T26125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5974'. [ 704.353275][T26131] syzkaller0: entered promiscuous mode [ 704.367501][T26131] syzkaller0: entered allmulticast mode [ 704.444846][T26151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 704.611491][T26172] loop9: detected capacity change from 0 to 512 [ 704.633535][T26172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.646937][T26172] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.648673][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.729816][T26178] SELinux: Context system_u:object_r:system_m is not valid (left unmapped). [ 704.771221][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 704.771315][ T28] audit: type=1400 audit(2000000005.352:6738): avc: denied { relabelto } for pid=26171 comm="syz.9.5990" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:system_m" [ 704.862694][T26182] loop1: detected capacity change from 0 to 128 [ 704.896357][T26182] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.916433][T26182] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.934050][T26182] syzkaller0: entered promiscuous mode [ 704.939661][T26182] syzkaller0: entered allmulticast mode [ 706.041391][T26151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.410215][T23740] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.535153][T26196] loop3: detected capacity change from 0 to 1024 [ 706.610213][T24490] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.624772][T26196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.691787][T26207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5998'. [ 706.748250][T14689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.894757][T26215] tipc: Started in network mode [ 706.900410][T26215] tipc: Node identity 000000005f0000004000000000000001, cluster identity 4711 [ 706.921461][T26215] tipc: Enabling of bearer rejected, failed to enable media [ 707.230730][T26229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6007'. [ 707.502901][T26239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6011'. [ 708.066267][T26255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6016'. [ 708.078997][T26255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6016'. [ 708.112477][T26255] dummy0: entered promiscuous mode [ 708.135016][T26255] team0: entered promiscuous mode [ 708.151920][T26258] loop9: detected capacity change from 0 to 128 [ 708.161538][T26255] team_slave_0: entered promiscuous mode [ 708.173969][T26258] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 708.188739][T26255] team_slave_1: entered promiscuous mode [ 708.218341][T26258] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.394596][T26267] loop1: detected capacity change from 0 to 512 [ 709.223400][T26267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.378835][T26267] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.549093][T24490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.652353][T23740] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 710.061941][T26301] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6030'. [ 710.161258][T26314] x_tables: duplicate underflow at hook 1 [ 710.174036][T26316] tc_dump_action: action bad kind [ 710.374131][T26323] ================================================================== [ 710.382337][T26323] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 710.390583][T26323] [ 710.393115][T26323] write to 0xffff88811a38f0a8 of 8 bytes by task 26324 on cpu 0: [ 710.401871][T26323] filemap_splice_read+0x523/0x780 [ 710.407535][T26323] splice_direct_to_actor+0x26e/0x670 [ 710.413434][T26323] do_splice_direct+0x119/0x1a0 [ 710.418472][T26323] do_sendfile+0x382/0x650 [ 710.423249][T26323] __x64_sys_sendfile64+0x105/0x150 [ 710.429243][T26323] x64_sys_call+0x2dc4/0x3020 [ 710.434411][T26323] do_syscall_64+0x12c/0x370 [ 710.439275][T26323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.445988][T26323] [ 710.448309][T26323] write to 0xffff88811a38f0a8 of 8 bytes by task 26323 on cpu 1: [ 710.456369][T26323] filemap_splice_read+0x523/0x780 [ 710.461506][T26323] splice_direct_to_actor+0x26e/0x670 [ 710.467642][T26323] do_splice_direct+0x119/0x1a0 [ 710.472870][T26323] do_sendfile+0x382/0x650 [ 710.477505][T26323] __x64_sys_sendfile64+0x105/0x150 [ 710.482837][T26323] x64_sys_call+0x2dc4/0x3020 [ 710.487526][T26323] do_syscall_64+0x12c/0x370 [ 710.492124][T26323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.498034][T26323] [ 710.500363][T26323] value changed: 0x0000000000259000 -> 0x00000000006fd000 [ 710.507755][T26323] [ 710.510362][T26323] Reported by Kernel Concurrency Sanitizer on: [ 710.516965][T26323] CPU: 1 UID: 0 PID: 26323 Comm: syz.5.6036 Tainted: G W syzkaller #0 PREEMPT(full) [ 710.528699][T26323] Tainted: [W]=WARN [ 710.532836][T26323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.543323][T26323] ==================================================================