last executing test programs: 4m50.995821079s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) creat(&(0x7f0000000040)='./file0\x00', 0x2) r0 = socket$unix(0x1, 0x2, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000180)={0x0, 0x8d9, 0x413, 0x9, 0xc, 0x1}) connect$unix(r0, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x1, 0x0, 0x4000, {0x0, 0x0, 0x0, r2, 0x0, 0x1391ccd1beab952f}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x60}}, 0x40000040) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000023c0), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 4m50.976244816s ago: executing program 2 (id=8): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a8001200040001", 0x37}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a8001200040001", 0x37}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) (async) 4m50.856376445s ago: executing program 2 (id=10): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000030001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000084010500ff020000000000000000000000000001000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe800000000000000000000000000000eda3adfd0000000000000000000000000000000000000000000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000feffffff00000000000000000000000000000000fe8000000000000000000000000000bb00000000330000000000000000000000000000000000000000000000000000000000500000000000000000000000000020010000000000000000000000000002001000006c0000000009"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m50.856096654s ago: executing program 2 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100000000000000300000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) 4m50.679959252s ago: executing program 2 (id=13): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0x2f880, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) (fail_nth: 4) 4m50.474189525s ago: executing program 2 (id=14): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x8100000, 0x3}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000300000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000013000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}}, 0x2b1, 0x7}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r6, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x108, 0x1d8, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x8]}}, @common=@ah={{0x30}, {[0x8, 0xa], 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @local, @port=0x4e24, @gre_key=0x6}}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xffffffff, '\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0xff, 0x1, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "1242"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1c, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0x95, @gre_key=0x4}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x17, @ipv4=@remote, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x66, @port=0x4e24}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x1, 0x3, 0x4, 0x0, 0x6], 0x5}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @local, @icmp_id=0x66, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 4m43.080847842s ago: executing program 0 (id=92): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000400)=ANY=[], 0xfd, 0x347, &(0x7f0000000080)="$eJzs3U2IG2UYwPEn2Y/OrO4miAoK6qO9qEjo5ihCu5SuiIGKNlItCFN3oiFjsmRCNEU2KRR68eDFr7MKIoUF8SAIpR48yS6ld0/2tgfXk6LFVyaZcWabmaxGuz30/zvMPrzv88wzmTcMu2/Y3Z1n3n/rD2NMzelIXnKSPyaD3I2cFCUvkYE88fbm1YdeeuXV51cqlRMvqq6unFouq+rSI5fPvHvpsSudu17+eunbQ7JVfG1nt3x96/6tB3b+PPVm3de6r81WRx21wpPp2od+o6T6guc6vqv1pu+2g/mzrVbHOeu5WvNa6+s9dZprdy+st13fV6fZ04bb005LO+2eOm849aaWSiVdXBCkOj88WiKXup+sZKdVv/zNGNnt/GDMoYEYY8Iq3Ck0/Dpaf1tE3stOPr54UJeFA5J4qFsi3sVutVsV8ZaCY2ClJnXxxJUjUpAbEjwjzKebZvioCI7vlDcr1578/jtVLcqG1w/r+93qTFxvnnZleT7RNa5ffa5yYllH9tbPyUKyf1kKcu+oZiSuL6fWz8vjhxP1JSnItdelJZ5sX3701+snL34U1W8sqx4/WRnW5yWqt2UtulxLvvgl/fYVb+3qAAAAAAAAAAAwnZKqqi2atX9fChIuBNFiUTaiz4SD+VEU7q/nkp8PRPvzM2H2kdT9+Vk5dlteMQAAAAAAdx6/dyGMeucajue5bd+OgmAk+hk+HkkEdjwym5WTCO5b2ptjjOnHOdEVZZZPDOypqsLAmrLpuYZjT7o/w+Cz8/udx5Zo5OHVyU0PH53ZDhsO4qm5m1fwXweWuO25m6ceNMbsHZkXkWla/H46OVKY6lLFGq/KjyfP/v3O3veEw1RLJuVYEu9iZeXMRYEtKefJ5UbVaS1+nnq9kkHYIFjBjPfhs2d+/Grf88yP3Z9xo229K//XswcAAADAwYq/6T8q/do33f7ppz74h6WmMPzdcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8F9N8SfHtj9Om9IguOfzaORqYiq1cW43+jcBWX66da8aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg9lcAAAD//wcPnf8=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791808000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x801420, &(0x7f0000000400)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b042, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0x80000001, 0x1, 0x1}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)) epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r5) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x18, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x537c0b8d69afff6f}, 0x20008080) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r2, &(0x7f0000000000)="826b", 0x2, 0x0, 0x0, 0x0) 4m42.962893371s ago: executing program 0 (id=94): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000001400"], 0xa4}}, 0x0) 4m42.950253099s ago: executing program 0 (id=95): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0), 0x0, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$igmp(0x2, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) openat(0xffffffffffffff9c, 0x0, 0x181080, 0x18) 4m42.891433938s ago: executing program 0 (id=97): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000001800000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000865d2a000000000000009500004036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0x1000000000) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc945361f4e5f0079}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r0, @ANYBLOB="000325bd7000fcdbdf250c00000034000980080001000800000008000200be0afc00080001000900000008000100a0c20000080002000900000008000200010000006c0006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000007d17c74aec10be90b0b26d32f4ff7f158d44a783e27d79bbaa6f4059486f59cceef5166d08000600050000000400051e04000500040003000800010000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 4m42.888300687s ago: executing program 0 (id=98): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) unshare(0x20000680) unshare(0x2040400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$netlink(r2, &(0x7f00000005c0)=@unspec, 0xfffffd06) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x11, 0x4) getsockopt(r0, 0xff, 0x800001, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x91ba, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m42.757658034s ago: executing program 0 (id=100): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802) 4m42.757255764s ago: executing program 32 (id=100): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802) 4m35.420575462s ago: executing program 33 (id=14): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x80000000000000, 0x800, 0x0, 0x8100000, 0x3}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000300000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000013000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}}, 0x2b1, 0x7}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r6, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x1b, 0x5, 0x410, 0x108, 0x1d8, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x8]}}, @common=@ah={{0x30}, {[0x8, 0xa], 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @local, @port=0x4e24, @gre_key=0x6}}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xffffffff, '\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0xff, 0x1, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "1242"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1c, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0x95, @gre_key=0x4}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x17, @ipv4=@remote, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x66, @port=0x4e24}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x1, 0x3, 0x4, 0x0, 0x6], 0x5}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @local, @icmp_id=0x66, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 3m7.089978794s ago: executing program 1 (id=1294): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x100010, r1, 0x180000000) accept4(r0, 0x0, 0x0, 0x0) 3m7.039829895s ago: executing program 1 (id=1296): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8052, &(0x7f0000000000), 0x1, 0x4ed, &(0x7f0000000240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) finit_module(r1, 0x0, 0x0) 3m6.269291415s ago: executing program 1 (id=1300): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r0, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x8d6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) close(r2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000000040)) 3m6.090743523s ago: executing program 1 (id=1302): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x3, 0x240, &(0x7f0000000840)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x5, 0x0) r4 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x10, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x64, &(0x7f0000000600)={@broadcast, @empty, @void, {@mpls_mc={0x8848, {[{0x2fba, 0x0, 0x1}], @ipv4=@igmp={{0xc, 0x4, 0x1, 0x9, 0x52, 0x68, 0x0, 0x4, 0x2, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0xb, 0x8a, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4, 0x43, 0x3, 0x6}, @lsrr={0x83, 0x3, 0xab}, @cipso={0x86, 0x6, 0x3}, @noop]}}, {0x0, 0x80, 0x0, @remote, "f219ee0e40685a0af7a459b15459a6703cdcd4ff34b8a2a5d973"}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffffc0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000400000008000000080000000000000027e801b87b66cf5d5c7117337c61bffc6d3d0f497554c8bed74ddb311644", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r7], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m5.240235508s ago: executing program 1 (id=1314): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x722) msgsnd(r0, &(0x7f0000000140)={0x3}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0xffffff7f00000000, 0x0) 3m5.215304334s ago: executing program 1 (id=1315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x8000000, 0x40041}, 0x0) 3m5.185909398s ago: executing program 34 (id=1315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x8000000, 0x40041}, 0x0) 2m38.214096171s ago: executing program 7 (id=1532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x84}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 2m38.132111336s ago: executing program 7 (id=1534): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000000c4c0), 0xa8000, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f}}]}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setpriority(0x2, 0xff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000400)=0x2a) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4d30a208913ee947}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0xd0, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x92, 0xa9, @random="953afb7fe7a01ae7dbbc937c35c0c8f4f85a6284f80c70477d7a8f12e1fc6244846af56fbc0b2ef3eec6ba85d847435d973aa864a108ab8d0c35c1633edab141dd85bb4c888503c36a5a9a14c625a077339a2483098f2a8fd2a4df3d5e62ccf89a7fd59daf52742a30e11324a6e536247dffa9cb170554f3cae3423bf8860698cb7ab5e8b94bc0654b02348eeb8b"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x2, 0xffff}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m31.537328199s ago: executing program 35 (id=1573): close(0xffffffffffffffff) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='westwood', 0x2c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x1, &(0x7f0000000280)=[{0x6, 0xba, 0x2, 0xffff}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2m28.548952856s ago: executing program 5 (id=1614): socket(0x10, 0x80002, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) clock_getres(0xfffffffffffffffe, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x94) 2m28.45996691s ago: executing program 5 (id=1615): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x800) 2m26.757407321s ago: executing program 5 (id=1626): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, 0x0, 0x3, {0x0, 0xff, 0x4}}, 0x18) syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x6c020000) listxattr(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)=""/6, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40442, 0x1) r5 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r5, &(0x7f0000000680)=""/4096, 0x1000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x14c98, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2) 2m25.863209259s ago: executing program 5 (id=1632): socket$inet_tcp(0x2, 0x1, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'macsec0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r5, &(0x7f0000002040)='./file0\x00', 0x5) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000b80)=0x6) recvmsg$kcm(r3, &(0x7f0000000880)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/38, 0x26}], 0x8, &(0x7f0000000840)=""/31, 0x1f}, 0x41) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x17, 0x1000, 0x1, 0x7, 0x200, r7, 0x5, '\x00', r8, r0, 0x1, 0x3, 0x3}, 0x50) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x202) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x32100, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r11, &(0x7f0000000240)=[{&(0x7f0000000280)="70faa26f98ca5482390b68699b11ff1e5135faec9073f29e9a912c9b7577ca9c376c273a03b38e5f71df8ea182dce0216cc93a613d5f5e8f0dd88000d4c5f698fef04c2b71b2790c4c9652c8fe144aeeea6271a85cf6f4b8e06a2a75f039a3b78cfa1ca5a5e9566cdcfaaf045af24af47d4e2c", 0x73}], 0x1) 2m25.719949283s ago: executing program 5 (id=1633): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x1a2d, 0x0, 0x7fa, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@grpjquota}]}, 0x1, 0x3f7, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000640), 0xf, 0x56f, &(0x7f0000000f40)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000700007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m25.563665834s ago: executing program 5 (id=1634): unshare(0x6020400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') r1 = socket$phonet_pipe(0x23, 0x5, 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) pread64(r0, &(0x7f0000000680)=""/240, 0xf0, 0x7ffffffffffffffe) 2m25.508110735s ago: executing program 36 (id=1634): unshare(0x6020400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') r1 = socket$phonet_pipe(0x23, 0x5, 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) pread64(r0, &(0x7f0000000680)=""/240, 0xf0, 0x7ffffffffffffffe) 12.432159565s ago: executing program 4 (id=2844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000f00000000000000005000400000000000900020073797a30000000000500010007000000050005000a010000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f"], 0x60}}, 0x0) 11.775868285s ago: executing program 4 (id=2854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 11.700031441s ago: executing program 4 (id=2856): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4603000702810000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000001000330d000005003800040078000700090000000070"], 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in=@dev, @in=@loopback}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11.465885719s ago: executing program 4 (id=2859): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001d40)=""/4067, 0xfe4}, {&(0x7f00000006c0)=""/149, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {0x0}], 0x5}}], 0xffffffffffffff55, 0x0, 0x0) 4.922939337s ago: executing program 6 (id=2893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000101010100000000000000000a001c002000018006000340000000001400018008c301007f000001080002007f0000010c001980080001"], 0x40}, 0x1, 0x0, 0x40000000000, 0x40}, 0x0) 4.822479389s ago: executing program 6 (id=2895): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f00000005c0)="238beccb6a", 0x5}, {&(0x7f00000008c0)="7a7c7e298e4bdf50", 0x8}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="c9d4b419d532895dab8aeecadb34f0503c3aa3bddcdd6f3880bad7ce55f57a0924647be1bd8305523b78af30c47a1bf12299ac5815be1da8bd3a749dbcda262c86079005bdd70eaa23eb7a83a9c6fd5aec32f0517ccfc8d0483cc23892ad7f107e084a3db59d5ab37c492a81b59a0f4204ce3fb61babfd3c5558894241c7a71789d3fc687b4bbc1fc225a938fb7e90956a665b28316dd9e2e63dbca2ae0740aa4d3ce6036e9577d796d26dada55ef3f055033177804e2177e7adde5fd325b7dcd56f7dbcbf2c63fe5ce01ea327dd1e6485eee1c266c92a62aef6d613831b1e7d403ad5f99064ec0198cc5631d9b8072f4d0ab53f3835c773511c84002ec05dbe30d41bb5ec155442befddee9996d087b34b7978907b8375f4dc0840f04d0142a13b620fdb5b6f29e76db44c3a471149b34320a55dd47a9f121dc1f2f1bbef8537aff633cfc79a036b103a948034ae92237c1a2ab8fe129512dd685243c4af254d9a0aa4768cbd3146d1076ac1f32665e66e3e9183a8cd0107f559c9797bdff9efa7c1331909744872fdc1da1c732f07d630ce1649a937c1cfbeff28f99a10fb2b19d9e7f36fc3e03a8b63bebac4cb4db9ae7ff5042efe1c909aa39339d50536ab5ab18d0c6c34d85398cf31abc1065bafefbef46bd2301b4a7db30554e35ef7c2e4a2f036ae9b1961a5cc36567fdd83f4e9dbc5e565ecd4bae2484c0cb7125155096a04e02e52b020f9dcff534d2ec8ee6a0abbffa956069335747c529969eff170842be270defc8b490c496e5bf4a5e4a7b84297919a2ee1d99fdb9c7cf1079ba3e34c25dfb1e08c14d57b339a87340bf0d1b6c888596ca3315833dbbfe3eb2f6ebdb77dd183fd5db1ca161592d9a2e8f7c5e8725d70354cf45dfcca29a3c8ac2e1c5a69b3fdf0c892f866011b2ae2237a7d528f0ad4002c1a37ad97bed5e7684f4129f3ca83d9f0876739c5696fbfce4a1ef1b4efecd87406aeece982c5c32e4e524b5ee9da25d13342befceac935739f461347cc3ffa3ddc2cf34e26327ef8efb636b927a42c3d951142cd4decb5ae38a72617044cb97d3d7fe716da8a8257b35a02bf3ce35631e1bd12a1ebe627b19820d219d245c13afedfca21aebaec2fd635c6bec5e94bd4952fa6fa248fb23eef9caa88851709ebf8aa347b2033c8a981f74148d651b3aba74cbd771cefe5d83707d6cf8246e6f25464e86749767a315dac30882dcc754c711ff1daac37a736a8d75e32f15778d95602ba6316d58aee4af79133d1875792f1408843eb73670bccd37a2ee443000e8a85fa11e0a0628229ae3d2a190e4f1056bec7e23640f963727a0a18165f96b768e9ab0e648ebd49d8fe857e621133b98b6170e00ff8bc215cefd5e41bead22b3afccc3accd4b8dd44c26f2cbc04b2f7ffa649667d2e18bfb705ffdff0e973eb3cce1aecde4917cf88209a85eaf47744e0fc2abbe2183420c7a85e31ad5983f0d584f6f7a722917263253d4e4eba996a0a208b8b280a6adbdedaa1a8eee123b997aa848a592c5296e1efc359239e78bfa83ef0b448a428b27547ecb735bb1ca5e3e34964897e44ff324bf805223267d0df43b825861254e44c19abe9de246fbac0fd628b348c3927bac4c9cf11fdd2b1d59f711657ccca22969d8f32ddf0692132dcdd0544e31f1aff090949d0d4df24e405b984a914bc5363e076b57375b170788a8a77d62170582139e7ebac03ad58718eff4dd81777a51fb160e2fea75e2807783baa93d894ea4da74989e21cb3652390fde765af08234a97516a00cc20dd2f9d3df84c54966800e0f9ba63cae9fb426683745c9e0751ee79d58a72c3687df3cdd5bd81a546828312f7380bd32ab7339471d1c0dca620b8866cf98e38e87596fd7eb1cda6f35a821583d94d1b2ec8dada77c2770eda8b3e07f6d795ed1bb62f9f45db3ecb0bec0c87f7199a8becfe630695354aa12fed101455da4ae37d66b0a96556e072323b2a12c871c32a0904ea77e7971ae6cb18c4655d4ee61bd9db6c0a1a915a10665c29d7d6658481ac006de053f9f52abb4612d5d88b90c7d72389dc7cf30b13561a0fa4789481f8c232806a5526bf7d58193f8f6ce93324ed036b3be2062352f5b2acb0f5326a564a5f689fcc171dfae461bdc7d63ddcf22b4deb1da2ee87c83131d177b16a784fec878be78f744935c818d20af9001a0a8242d4fd64e80309e7d04073f837aba67ce3ef64bde5b64dd6a36259071322de0e65a3ffcf3eb679b9eaf317a328fe3120e82bd063ebefe656ba5081e574b2b1065b86e5c7460b9ede52abd88de1cc0d21fca25a5b37f372fbd3945ab9a4731e8cc2735a0e3c67ec2383025d529484d45d77873c349d615b5e1115cbbbb752f6e3a0bf6f0230b36d8dacf887be70ed5ecb720a6cce634582c2eba4169f0c10a1379ff3b744dd683a29fd921adafabe08a8a67731f203056ff79223bb8e56c8e1b3932ff2f599b2e89512ddf94e8ed715e6b2a2dc5239d2ed858c403be3c332c3877d3c3595010a2d05d37ab701a702ac170f43a4a25c03442ba512583d34e029b05512066f5595b99df942c9e69513b75303d1d43b4cff7abf0791b156e6eef9ce846c2b1f41be4b28245abbe2f92fe64321f6a1d724edbeacf4824471a3e52f0e508569c8a030764e679b4a3c594facbc48c20a6a13e402e0bcdc7162f0a5348b15ca8817dcdd39f57ee69b92b5879dc5c056f52bcf190e1cdc097f46e0dd7d59e474f5edf23464a5d026999508d271cfbe8b2721794f8df8cbb4ff6f446e0914eb115037fd3e416ecf63ab3029980d9f9a9688fc9f8e88274a11e7e515ee2b6f595fec98e285479b11b4fc2d5170d1f69e0b079a00807df159783b48349ab0e142ccbd7dac4a3939bf6426917854dec3f56d803f8a3bc57328a94332a27ee9cfa0dbc0a7ad7f595e2b498afccf3db25c40bf773d1ec2fdc2dd78bfa329b9f0cace3fb3ea5eafe53d5bb886f3b13d2959371438422d3ca2bcd5ec20e9bffb5b242e4fa9906efd2ef08e7c33bee9e3d1b69a4804de01e6088f2062945a5653c1ff914636f26d1dcbe33120c4b90ea722287a8a786dce1ab3dd67d7fdaec593960379c01623d238c2f90ff3bca845120e5575b4d8e1cde89b1ef6521c1e57c9d8dd5694427d3d081de094a432d13b518ff5c7456c882b702a24f32a2d5fa33824c012e494b5548ba21b2997647c79fa3b92f6958479fa4dd368a0ed60a380485472a5fd0d484d7e1e2af9e136ac25936632fbaf9b10b32f1d24edc5f332b2198c6eb7acb26d97c455c30533843df0ab179046d2ddc3bd0d76fb81e6d7d1c5a0e1457c43b500eff75800a0d6c73e8a3fa0b36d9a91fdbd4c35718d97ac4a2674c4a6957ca9394c5a4276379cedd7fc5c026a77d2e1f593a318c402d6b9789f13a426c890b75a73bb83f1d1fa59397e1db6d5c1657173e1e7ccd374f287bba80865a6949599ca2c1942d82813bae6deabd6b7fa1ba74b1180e5c77b5475509d74205eeaef8d89124436f2ba409e656df476119f510e56514ff8dabd160733866feca5c04f5d39655565a90b9ecce2d7410de527080053de62988e24a8de4559e7442007fc8386ae5ee3b38f4a8279760218030dcd2e8697db66e9dfe9407b0a2ea851444bd7884f049ddc8888f62cdabfb9170530a951ec2feb9fd4fd189a2c2c1a60e0237bc048f4a898b07e14295297a78f4083ddb5915df8a188dc1efbd93b20e3801b083e37e685e4e5b429249ef548ba0415ac336511dd6b2f7acf8046d62bb346387a9f64fcf1441d9dd378a6516fe4e63fcdc61d618e617a819d72f37ed87505754fd013c725289bfbe638f8c1519cbaccd7c6f6dec618b458fd6ad229c00507a3ac063830716433bf036f346f2abaa6efbd9f7f2ac357655eaae4b93ff41767c6436b742d233a0b81df05daa898573048bd1b541932cd81093d82767d4477b53d3bd29ca15b9871d1412367584cc9e4e0de416f397dea159b68ea334edf6ea7404a5b9ea5cbfb8e12ca7bdc9a246f96a0d402f879299106b5d899650f8fdbfb99f60ddd9e3b15274979928457cf00f6649d660e2c5d597621219471a71a4d7c5ddc2b23bf88f292bf88348f4f7e1c831b2bcb6d550b63bae8f6eb4e2b63f066c67333f7bad4e2aea3b8c03b5e666286140c279cdbf8832ae57f99299796ec289b40adcd65723f3831c027b29422360f9762fd1c5948a2b038460cbdbd77e70963f624213944fdb5a220e9c6e48437d7e9993fb94104844afd27a272e885e35b5e3a315af32c9541be8818f26005b57cd94a355340f0a82c834d770e404f2cecda02e93496f16ad13be01c2e5d353e935c884d637268c6fcf721de9787b727a96279f095962c383aa400c6eeb9607ecfa5a69b9b97808911855640ebb94ff4bef3ea39586e22352fc398bfda62f4a6d40bfdd460662c6fbe059ec379d887d70d79eb4bc4f1dfeca4089aa7a689aa181aaad463f68a9958dbd32a92632790b2686a937acffb3193eca105d19af732693100186f63d35aa9dfc73dd4ec45cf5685f1e4551c4564a8f13f0ec230c116e77ff640e20bc616fb0b472d9962e377a24117d5aae3a23e2e66e95ce501f6678c0ca5976b360ea47478853277cfe297ca7042790e3cba9522121e65ddf3d2cd6c2319244792d9649726ef317b87dad51b2accb96e0c78698ca412cc36486fdd09e9c4a109b7fabfa5b3dea6c245fe523cd23f62b08de4e6ac85f056663db2425e076701e91b58ed9186d598ba06d2c0c83513111ac8ced18", 0xd3f}, {&(0x7f0000002180)}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)="cd52c0793e0c", 0x6}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$igmp(0x2, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) openat(0xffffffffffffff9c, 0x0, 0x181080, 0x18) 4.66891079s ago: executing program 9 (id=2896): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1, 0x0, 0x1}]) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$inet6(0xa, 0x805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000001200)=[@in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000001640)=""/4086, &(0x7f00000011c0)=0xff6) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x21, 0x0, &(0x7f00007d0000)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc4}) syz_io_uring_setup(0x3895, &(0x7f0000001100)={0x0, 0x6ede, 0x8000, 0x3, 0x2da}, &(0x7f0000001080), &(0x7f0000001180)) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000001240)=ANY=[], &(0x7f0000002a80)=0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(r1, 0x0, r1) 4.626723723s ago: executing program 6 (id=2897): socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4.504088761s ago: executing program 6 (id=2899): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.344098371s ago: executing program 3 (id=2900): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000f00000000000000005000400000000000900020073797a30000000000500010007000000050005000a010000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 3.776955708s ago: executing program 9 (id=2901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x0) 3.672187649s ago: executing program 9 (id=2902): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x800000, 0x6, 0x2, 0xcb, 0x2, 0x0, 0x76, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a601000004000000030000000084b40000000000000000120500000004000000c0905cf703000000060000000000001008000000005f615f5f6100"], 0x0, 0x67, 0x0, 0x1}, 0x28) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2], 0xfe, 0x122e, &(0x7f0000001280)="$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") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) syz_open_dev$loop(0x0, 0x18a, 0x10400) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r4, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8000) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x4) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 3.3472747s ago: executing program 3 (id=2903): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB], 0xdd12}], 0x1}, 0x0) 3.302794252s ago: executing program 8 (id=2904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@private=0xa010102, {0x0, 0x4, 0x0, 0x0, 0xff80, 0x0, 0x2, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x24000058) 3.2361969s ago: executing program 3 (id=2905): close(0xffffffffffffffff) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='westwood', 0x2c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xd}, &(0x7f0000000100)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.553328065s ago: executing program 6 (id=2906): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x800) 2.30120855s ago: executing program 8 (id=2907): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f00000005c0)="238beccb6a", 0x5}, {&(0x7f00000008c0)="7a7c7e298e4bdf50", 0x8}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)="cd52c0793e0c", 0x6}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket$igmp(0x2, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) openat(0xffffffffffffff9c, 0x0, 0x181080, 0x18) 1.331893423s ago: executing program 9 (id=2908): eventfd2(0x59a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) syz_pidfd_open(0x0, 0x0) socket(0x2, 0x3, 0xff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000300)=0xa8) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2000b3d) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x1b) r3 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0xb8, 0x1000, 0x3, 0x1af, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x29, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x3}}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r3, 0x47bc, 0xb3f7, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.331518663s ago: executing program 8 (id=2909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x200000000000000) 1.222746803s ago: executing program 3 (id=2910): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r4, 0x25, 0x4, @void}, 0x10) 1.090059189s ago: executing program 3 (id=2911): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x7fff, 0x7, 0xc8e, 0x6}, &(0x7f0000000080)=0x14) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x8000, 0x8, 0x0, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e21, 0x46c0b94, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}}, 0x84) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000200)=0x8180004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 928.283139ms ago: executing program 8 (id=2912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x0) 836.211943ms ago: executing program 8 (id=2913): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 566.542433ms ago: executing program 6 (id=2914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_config_ext={0x11f}, 0x0, 0x10003, 0x83, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0xffffffff, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x37, 0x9, 0x70bd2c, 0x0, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) unshare(0x60600) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r5 = dup(r4) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x8000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x8f7}) ftruncate(0xffffffffffffffff, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) syz_emit_ethernet(0x2a, &(0x7f0000000880)=ANY=[], 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000008eff35d9fbe993075757340534ce4727aa488096f76a2677b64a887e4a739f1edfac9ab3a17d7c4ab9039cf7ffa294544967533b8c9293112d5182f85e3a8e77136671a771b421a4515218664fe0ffe8811ff4ef03153e2c91213373fdc196d82ba82ee03d3b9e064144d7d9af5167794b0fe9", @ANYRES16=r7, @ANYBLOB="20052abd7000fbdbdf250500000008000400030000000800030001000000080004000900000005000500080000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r8], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x20004800) 493.48474ms ago: executing program 4 (id=2915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x22, 0x80801, 0x3) close(0x3) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x2, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES8], 0x8, 0x800) 451.713182ms ago: executing program 9 (id=2916): socket$netlink(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x1000, 0x809, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) set_mempolicy_home_node(&(0x7f0000540000/0x3000)=nil, 0x3000, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 429.762078ms ago: executing program 4 (id=2917): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000008}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeef0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 350.718094ms ago: executing program 9 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000001800010000000000010000001d01000008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="17"], 0x24}}, 0x20008030) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500006eb14f7c63af8c1000000000000050000070900010073797a3000000000300002002c000180140003002001000000000000000000000000000214000400200100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000080) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0x7f}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r6 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 205.683417ms ago: executing program 3 (id=2919): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3f, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x800000, 0x6, 0x2, 0xcb, 0x2, 0x0, 0x76, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a601000004000000030000000084b40000000000000000120500000004000000c0905cf703000000060000000000001008000000005f615f5f6100"], 0x0, 0x67, 0x0, 0x1}, 0x28) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) syz_open_dev$loop(0x0, 0x18a, 0x10400) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r4, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x8000) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x4) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 0s ago: executing program 8 (id=2920): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000f00000000000000005000400000000000900020073797a30000000000500010007000000050005000a010000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): 13 at logical offset 2158284 with max blocks 4 with error 28 [ 234.991589][ T8299] EXT4-fs (loop8): This should not happen!! Data will be lost [ 234.991589][ T8299] [ 234.991625][ T8299] EXT4-fs (loop8): Total free blocks count 0 [ 234.991640][ T8299] EXT4-fs (loop8): Free/Dirty block details [ 234.991653][ T8299] EXT4-fs (loop8): free_blocks=0 [ 234.991667][ T8299] EXT4-fs (loop8): dirty_blocks=4 [ 234.991735][ T8299] EXT4-fs (loop8): Block reservation details [ 234.991774][ T8299] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 234.999412][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.034851][ T8955] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.506607][T11428] loop3: detected capacity change from 0 to 128 [ 235.618306][T11429] loop9: detected capacity change from 0 to 4096 [ 235.806891][T11429] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.960850][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 235.960915][ T28] audit: type=1400 audit(2000000025.140:11937): avc: denied { mounton } for pid=11427 comm="syz.3.2231" path="/458/file1/file0" dev="loop3" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 236.426442][ T28] audit: type=1400 audit(2000000025.220:11938): avc: denied { remount } for pid=11427 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 236.472462][ T28] audit: type=1400 audit(2000000025.650:11939): avc: denied { ioctl } for pid=11432 comm="syz.6.2232" path="socket:[33735]" dev="sockfs" ino=33735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 237.418866][ T8955] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.544758][ T28] audit: type=1400 audit(2000000026.730:11940): avc: denied { cmd } for pid=11442 comm="syz.9.2235" path="socket:[34818]" dev="sockfs" ino=34818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 237.546893][T11420] Q6`Ҙ speed is unknown, defaulting to 1000 [ 237.724318][T11420] lo speed is unknown, defaulting to 1000 [ 237.869431][T11447] loop9: detected capacity change from 0 to 512 [ 237.893751][T11447] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 237.932557][T11447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 237.963267][T11447] EXT4-fs (loop9): orphan cleanup on readonly fs [ 237.992697][T11447] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 238.002518][T11447] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 238.017441][T11447] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 238.046282][T11447] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2236: bg 0: block 40: padding at end of block bitmap is not set [ 238.095253][T11451] loop3: detected capacity change from 0 to 512 [ 238.102298][T11447] loop9: lost filesystem error report for type 5 error -117 [ 238.102635][T11447] EXT4-fs (loop9): Remounting filesystem read-only [ 238.110059][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 238.110079][ C0] EXT4-fs (loop9): initial error at time 2000000027: ext4_validate_block_bitmap:441 [ 238.110108][ C0] EXT4-fs (loop9): last error at time 2000000027: ext4_validate_block_bitmap:441 [ 238.152975][T11451] EXT4-fs: inline encryption not supported [ 238.165688][T11447] EXT4-fs (loop9): 1 truncate cleaned up [ 238.177894][T11451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.196284][T11447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.212963][T11451] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.237877][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2236'. [ 238.277673][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.316572][T11467] loop3: detected capacity change from 0 to 512 [ 238.358136][T11467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.390160][T11467] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.405011][T11479] netlink: 'syz.8.2245': attribute type 16 has an invalid length. [ 238.414153][T11479] netlink: 572 bytes leftover after parsing attributes in process `syz.8.2245'. [ 238.438409][ T8955] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.449630][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.568819][ T28] audit: type=1400 audit(2000000027.750:11941): avc: denied { getopt } for pid=11483 comm="syz.9.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 238.709157][T11501] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2250'. [ 238.719084][T11493] loop6: detected capacity change from 0 to 4096 [ 239.240978][T11493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.260043][T11493] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.304758][T11499] Q6`Ҙ speed is unknown, defaulting to 1000 [ 239.311895][T11499] lo speed is unknown, defaulting to 1000 [ 239.516668][T11570] loop8: detected capacity change from 0 to 512 [ 239.616867][T11579] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 239.625775][T11582] loop9: detected capacity change from 0 to 512 [ 239.645975][T11582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.658881][T11579] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.675504][T11582] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.696010][T11579] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 239.707762][T11579] bond4: (slave batadv1): making interface the new active one [ 239.713901][T11582] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.2259: iget: bad i_size value: 2533274857506816 [ 239.717010][T11579] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 239.750193][T11590] loop3: detected capacity change from 0 to 1024 [ 239.786725][T11590] EXT4-fs: Ignoring removed orlov option [ 239.824908][ T8955] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.852332][T11597] netlink: 'syz.6.2264': attribute type 16 has an invalid length. [ 239.870882][T11597] netlink: 572 bytes leftover after parsing attributes in process `syz.6.2264'. [ 239.871062][T11590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.960982][T11579] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.2258: failed to insert inode 12: doubly allocated? [ 239.973802][ T28] audit: type=1400 audit(2000000029.130:11942): avc: denied { create } for pid=11578 comm="syz.3.2258" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.022233][ T28] audit: type=1400 audit(2000000029.140:11943): avc: denied { setattr } for pid=11578 comm="syz.3.2258" name="bus" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.053643][T11611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 240.105058][ T28] audit: type=1326 audit(2000000029.290:11944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa865ec799 code=0x7ffc0000 [ 240.160243][ T28] audit: type=1326 audit(2000000029.320:11945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.4.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa865ec799 code=0x7ffc0000 [ 240.225609][T11622] FAULT_INJECTION: forcing a failure. [ 240.225609][T11622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.233956][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2269'. [ 240.266668][T11622] CPU: 1 UID: 0 PID: 11622 Comm: syz.8.2270 Not tainted syzkaller #0 PREEMPT(full) [ 240.266778][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 240.266790][T11622] Call Trace: [ 240.266796][T11622] [ 240.266811][T11622] __dump_stack+0x1d/0x30 [ 240.266839][T11622] dump_stack_lvl+0x95/0xd0 [ 240.266863][T11622] dump_stack+0x15/0x1b [ 240.266950][T11622] should_fail_ex+0x263/0x280 [ 240.266978][T11622] should_fail+0xb/0x20 [ 240.267002][T11622] should_fail_usercopy+0x1a/0x20 [ 240.267031][T11622] _copy_from_user+0x1c/0xb0 [ 240.267083][T11622] ___sys_sendmsg+0xc1/0x1e0 [ 240.267126][T11622] __x64_sys_sendmsg+0xd4/0x160 [ 240.267175][T11622] x64_sys_call+0x194c/0x3020 [ 240.267199][T11622] do_syscall_64+0x12c/0x370 [ 240.267221][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.267246][T11622] RIP: 0033:0x7f8e85afc799 [ 240.267302][T11622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.267372][T11622] RSP: 002b:00007f8e8454f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.267473][T11622] RAX: ffffffffffffffda RBX: 00007f8e85d75fa0 RCX: 00007f8e85afc799 [ 240.267487][T11622] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 240.267500][T11622] RBP: 00007f8e8454f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.267587][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.267599][T11622] R13: 00007f8e85d76038 R14: 00007f8e85d75fa0 R15: 00007ffe348b8a18 [ 240.267657][T11622] [ 240.285949][T11619] Q6`Ҙ speed is unknown, defaulting to 1000 [ 240.530494][T11619] lo speed is unknown, defaulting to 1000 [ 240.594932][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2273'. [ 240.647467][T11632] loop8: detected capacity change from 0 to 4096 [ 240.687122][T11632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.721654][T11632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.752485][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.881777][T11661] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2276'. [ 240.917246][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2278'. [ 242.123195][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 242.123217][ T28] audit: type=1400 audit(2000000030.930:12019): avc: denied { create } for pid=11679 comm="syz.3.2281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 243.083289][T11695] loop8: detected capacity change from 0 to 512 [ 243.090937][T11692] cgroup: Invalid name [ 243.118020][T11692] loop3: detected capacity change from 0 to 512 [ 243.130775][T11695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80fc02c, mo2=0002] [ 243.164035][T11692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 243.192529][T11695] System zones: 1-12 [ 243.218211][T11692] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2285: bad orphan inode 131083 [ 243.240193][T11695] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2286: error while reading EA inode 32 err=-116 [ 243.283494][T11692] loop3: lost filesystem error report for type 5 error -117 [ 243.286484][T11695] loop8: lost filesystem error report for type 5 error -117 [ 243.293855][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 243.293876][ C0] EXT4-fs (loop3): initial error at time 2000000032: ext4_orphan_get:1417 [ 243.293896][ C0] EXT4-fs (loop3): last error at time 2000000032: ext4_orphan_get:1417 [ 243.333947][T11692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.406456][T11695] EXT4-fs (loop8): Remounting filesystem read-only [ 243.413035][T11695] EXT4-fs (loop8): 1 orphan inode deleted [ 243.419342][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 243.419369][ C0] EXT4-fs (loop8): initial error at time 2000000032: ext4_xattr_inode_iget:446 [ 243.419397][ C0] EXT4-fs (loop8): last error at time 2000000032: ext4_xattr_inode_iget:446 [ 243.523936][T11695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.089692][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.178316][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.203490][ T28] audit: type=1400 audit(2000000033.380:12020): avc: denied { getopt } for pid=11710 comm="syz.9.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 244.337746][T11719] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.2294'. [ 244.338766][T11721] loop3: detected capacity change from 0 to 128 [ 244.373565][T11719] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 244.395001][T11721] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.412894][T11721] ext4 filesystem being mounted at /472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.472016][T11722] loop9: detected capacity change from 0 to 4096 [ 244.500535][T11721] x_tables: duplicate underflow at hook 2 [ 244.519347][T11727] x_tables: duplicate underflow at hook 2 [ 244.524175][T11721] Invalid argument reading file caps for ./file0 [ 244.559785][T11722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.587253][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.598123][T11725] Q6`Ҙ speed is unknown, defaulting to 1000 [ 244.656219][T11725] lo speed is unknown, defaulting to 1000 [ 244.675537][T11732] loop3: detected capacity change from 0 to 512 [ 244.696010][T11722] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.756314][T11732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.832092][T11732] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.907406][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.176090][ T28] audit: type=1400 audit(2000000035.360:12021): avc: denied { connect } for pid=11767 comm="syz.8.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.573988][T11782] netlink: 4436 bytes leftover after parsing attributes in process `syz.8.2307'. [ 246.595704][T11782] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 246.653545][T11784] loop3: detected capacity change from 0 to 128 [ 246.675529][T11784] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.723817][T11784] ext4 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.824348][T11792] Q6`Ҙ speed is unknown, defaulting to 1000 [ 246.849746][ T28] audit: type=1400 audit(2000000036.030:12022): avc: denied { append } for pid=11785 comm="syz.8.2309" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 246.851731][T11792] lo speed is unknown, defaulting to 1000 [ 246.901887][T11795] Q6`Ҙ speed is unknown, defaulting to 1000 [ 246.904628][T11784] x_tables: duplicate underflow at hook 2 [ 246.921582][T11796] loop9: detected capacity change from 0 to 512 [ 246.965494][T11795] lo speed is unknown, defaulting to 1000 [ 246.973811][T11796] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 247.012423][T11796] System zones: 0-2, 18-18, 34-34 [ 247.044438][T11796] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 247.063833][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.111475][T11796] EXT4-fs (loop9): Remounting filesystem read-only [ 247.118227][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 247.118246][ C0] EXT4-fs (loop9): initial error at time 2000000036: ext4_mb_generate_buddy:1315 [ 247.118268][ C0] EXT4-fs (loop9): last error at time 2000000036: ext4_mb_generate_buddy:1315 [ 247.227267][T11796] EXT4-fs (loop9): 1 truncate cleaned up [ 247.247369][ T8293] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 247.263975][T11796] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.285469][ T8293] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 247.333691][ T8293] Quota error (device loop9): write_blk: dquota write failed [ 247.367476][ T8293] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries [ 247.389212][ T28] audit: type=1400 audit(2000000036.570:12023): avc: denied { write } for pid=11800 comm="syz.3.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.403699][ T8293] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 247.422388][T11786] loop8: detected capacity change from 0 to 512 [ 247.458751][ T8293] Quota error (device loop9): write_blk: dquota write failed [ 247.477943][T11786] vfat: Unknown parameter '' [ 247.487184][ T8293] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list [ 247.533468][ T8293] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 247.560420][ T8293] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 247.594090][ T8293] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 247.633511][ T8293] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 247.874654][T11786] loop8: detected capacity change from 0 to 512 [ 247.992293][T11810] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2315'. [ 248.304342][T11850] loop8: detected capacity change from 0 to 512 [ 248.337483][ T28] audit: type=1400 audit(2000000037.520:12024): avc: denied { write } for pid=11849 comm="syz.8.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.696219][T11862] loop6: detected capacity change from 0 to 4096 [ 248.929803][T11861] Q6`Ҙ speed is unknown, defaulting to 1000 [ 248.951602][T11861] lo speed is unknown, defaulting to 1000 [ 248.992079][T11919] loop3: detected capacity change from 0 to 512 [ 249.025831][T11919] EXT4-fs: Ignoring removed nobh option [ 249.035445][T11919] EXT4-fs: Ignoring removed orlov option [ 249.043247][T11919] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 1: comm syz.3.2323: invalid block [ 249.054603][T11919] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 249.054873][T11919] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2323: couldn't read orphan inode 11 (err -117) [ 249.064391][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 249.064428][ C0] EXT4-fs (loop3): initial error at time 2000000038: __ext4_iget:5378: inode 11: block 1 [ 249.064470][ C0] EXT4-fs (loop3): last error at time 2000000038: __ext4_iget:5378: inode 11: block 1 [ 249.136186][T11919] loop3: lost filesystem error report for type 5 error -117 [ 249.267871][T11930] loop8: detected capacity change from 0 to 512 [ 249.379378][T11937] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2329'. [ 251.332864][T11955] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2335'. [ 251.577904][T11976] Q6`Ҙ speed is unknown, defaulting to 1000 [ 251.607828][T11976] lo speed is unknown, defaulting to 1000 [ 251.713207][T11981] Q6`Ҙ speed is unknown, defaulting to 1000 [ 251.736216][T11984] loop8: detected capacity change from 0 to 256 [ 251.763912][T11981] lo speed is unknown, defaulting to 1000 [ 251.777717][T11984] FAT-fs (loop8): Directory bread(block 1285) failed [ 251.813122][T11984] FAT-fs (loop8): Directory bread(block 1286) failed [ 251.838894][T11984] FAT-fs (loop8): Directory bread(block 1287) failed [ 251.857601][T11953] loop9: detected capacity change from 0 to 512 [ 251.863808][T11984] FAT-fs (loop8): Directory bread(block 1288) failed [ 251.890136][T11984] FAT-fs (loop8): Directory bread(block 1285) failed [ 251.904635][T11984] FAT-fs (loop8): Directory bread(block 1286) failed [ 251.919646][T11953] vfat: Unknown parameter '' [ 251.920038][T11984] FAT-fs (loop8): Directory bread(block 1287) failed [ 251.920063][T11984] FAT-fs (loop8): Directory bread(block 1288) failed [ 252.113826][T11984] usb usb1: usbfs: process 11984 (syz.8.2338) did not claim interface 0 before use [ 252.476466][T11953] loop9: detected capacity change from 0 to 512 [ 252.973313][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 252.973330][ T28] audit: type=1400 audit(2000000042.150:12028): avc: denied { create } for pid=11993 comm="syz.9.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.076207][ T28] audit: type=1400 audit(2000000042.250:12029): avc: denied { create } for pid=11993 comm="syz.9.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.113192][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2348'. [ 253.170409][ T28] audit: type=1400 audit(2000000042.290:12030): avc: denied { write } for pid=11993 comm="syz.9.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.335770][ T28] audit: type=1400 audit(2000000042.290:12031): avc: denied { nlmsg_write } for pid=11993 comm="syz.9.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.373318][T11997] Q6`Ҙ speed is unknown, defaulting to 1000 [ 253.428784][ T28] audit: type=1400 audit(2000000042.470:12032): avc: denied { read write } for pid=8955 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.444130][T11997] lo speed is unknown, defaulting to 1000 [ 253.501238][ T28] audit: type=1400 audit(2000000042.470:12033): avc: denied { open } for pid=8955 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.664739][T12004] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2351'. [ 253.703470][ T28] audit: type=1400 audit(2000000042.470:12034): avc: denied { ioctl } for pid=8955 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.732738][T12000] loop8: detected capacity change from 0 to 512 [ 253.775984][T12000] EXT4-fs mount: 10 callbacks suppressed [ 253.776001][T12000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.814298][T12000] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 253.833690][ T28] audit: type=1400 audit(2000000042.510:12035): avc: denied { map_create } for pid=11996 comm="syz.9.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 253.854638][ T28] audit: type=1400 audit(2000000042.590:12036): avc: denied { unmount } for pid=8654 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 253.878419][ T28] audit: type=1400 audit(2000000042.710:12037): avc: denied { open } for pid=11996 comm="syz.9.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.931728][T12014] netlink: 'syz.4.2353': attribute type 8 has an invalid length. [ 253.951274][T12014] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 254.098321][T12023] loop3: detected capacity change from 0 to 512 [ 254.107923][T12023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.136325][T12023] EXT4-fs (loop3): 1 truncate cleaned up [ 254.143074][T12023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.174092][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 254.264527][T12031] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.2361' resets device [ 254.385646][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.405638][T12038] loop3: detected capacity change from 0 to 512 [ 254.415348][T12038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.453328][T12036] loop6: detected capacity change from 0 to 1024 [ 254.466392][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.479956][T12036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.492951][T12038] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 254.508080][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2362'. [ 254.520827][T12038] EXT4-fs (loop3): 1 truncate cleaned up [ 254.536528][T12038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.719509][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.745350][T12046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2365'. [ 254.757423][T12047] loop8: detected capacity change from 0 to 512 [ 254.792158][T12047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.820537][T12047] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.904583][T12060] loop3: detected capacity change from 0 to 128 [ 254.919031][T12060] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.956446][T12060] ext4 filesystem being mounted at /487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.026548][T12060] x_tables: duplicate underflow at hook 2 [ 255.094891][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.171085][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.270705][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2376'. [ 255.453451][T12120] loop9: detected capacity change from 0 to 8192 [ 255.783003][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.380074][T12139] xt_HMARK: proto mask must be zero with L3 mode [ 257.433991][T12141] loop8: detected capacity change from 0 to 128 [ 257.459309][T12141] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.493707][T12141] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.569079][T12141] x_tables: duplicate underflow at hook 2 [ 257.607311][ T8654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.759818][T12157] 9p: Bad value for 'rfdno' [ 257.822440][T12152] loop6: detected capacity change from 0 to 1024 [ 257.829192][T12152] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2388: bad orphan inode 134217728 [ 257.829221][T12152] loop6: lost filesystem error report for type 5 error -117 [ 257.829875][T12152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.839333][T12162] Q6`Ҙ speed is unknown, defaulting to 1000 [ 257.840002][T12162] lo speed is unknown, defaulting to 1000 [ 257.899238][T12169] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2393'. [ 257.996119][ T28] kauditd_printk_skb: 174 callbacks suppressed [ 257.996138][ T28] audit: type=1400 audit(2000000047.180:12212): avc: denied { create } for pid=12145 comm="syz.9.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.025290][T12177] syz_tun: left allmulticast mode [ 258.043820][T12177] syz_tun: left promiscuous mode [ 258.049011][T12177] bridge0: port 3(syz_tun) entered disabled state [ 258.080640][T12177] bridge_slave_1: left allmulticast mode [ 258.087885][ T28] audit: type=1400 audit(2000000047.210:12213): avc: denied { ioctl } for pid=12147 comm="syz.6.2388" path="/378/bus/bus" dev="loop6" ino=18 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.134625][T12177] bridge_slave_1: left promiscuous mode [ 258.135043][T12180] FAULT_INJECTION: forcing a failure. [ 258.135043][T12180] name failslab, interval 1, probability 0, space 0, times 0 [ 258.140935][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.181911][T12180] CPU: 0 UID: 0 PID: 12180 Comm: syz.3.2395 Not tainted syzkaller #0 PREEMPT(full) [ 258.181960][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.181972][T12180] Call Trace: [ 258.181980][T12180] [ 258.181990][T12180] __dump_stack+0x1d/0x30 [ 258.182019][T12180] dump_stack_lvl+0x95/0xd0 [ 258.182045][T12180] dump_stack+0x15/0x1b [ 258.182141][T12180] should_fail_ex+0x263/0x280 [ 258.182252][T12180] ? __pfx_sock_alloc_inode+0x10/0x10 [ 258.182275][T12180] should_failslab+0x8c/0xb0 [ 258.182299][T12180] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 258.182336][T12180] ? sock_alloc_inode+0x34/0xa0 [ 258.182366][T12180] ? __pfx_sock_alloc_inode+0x10/0x10 [ 258.182405][T12180] sock_alloc_inode+0x34/0xa0 [ 258.182426][T12180] alloc_inode+0x40/0x170 [ 258.182448][T12180] do_accept+0xa0/0x390 [ 258.182494][T12180] ? _raw_spin_lock+0x52/0xa0 [ 258.182524][T12180] __sys_accept4+0xbe/0x170 [ 258.182549][T12180] __x64_sys_accept4+0x51/0x60 [ 258.182573][T12180] x64_sys_call+0x48d/0x3020 [ 258.182681][T12180] do_syscall_64+0x12c/0x370 [ 258.182704][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.182763][T12180] RIP: 0033:0x7f8d7ff2c799 [ 258.182781][T12180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.182842][T12180] RSP: 002b:00007f8d7e97f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 258.182935][T12180] RAX: ffffffffffffffda RBX: 00007f8d801a5fa0 RCX: 00007f8d7ff2c799 [ 258.182951][T12180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 258.183025][T12180] RBP: 00007f8d7e97f090 R08: 0000000000000000 R09: 0000000000000000 [ 258.183040][T12180] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 258.183053][T12180] R13: 00007f8d801a6038 R14: 00007f8d801a5fa0 R15: 00007ffe9d3fc5e8 [ 258.183090][T12180] [ 258.193242][ T28] audit: type=1400 audit(2000000047.370:12214): avc: denied { checkpoint_restore } for pid=12145 comm="syz.9.2387" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.397824][T12177] bridge_slave_0: left allmulticast mode [ 258.403800][T12177] bridge_slave_0: left promiscuous mode [ 258.412197][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.476303][ T28] audit: type=1400 audit(2000000047.620:12215): avc: denied { create } for pid=12145 comm="syz.9.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 258.497351][ T28] audit: type=1400 audit(2000000047.640:12216): avc: denied { setattr } for pid=12145 comm="syz.9.2387" name="TIPC" dev="sockfs" ino=36665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.591317][T12183] Q6`Ҙ speed is unknown, defaulting to 1000 [ 258.603701][T12183] lo speed is unknown, defaulting to 1000 [ 258.613494][ T28] audit: type=1400 audit(2000000047.780:12217): avc: denied { bind } for pid=12185 comm="syz.8.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.673946][ T28] audit: type=1400 audit(2000000047.790:12218): avc: denied { write } for pid=12185 comm="syz.8.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 258.714815][ T28] audit: type=1400 audit(2000000047.820:12219): avc: denied { bind } for pid=12185 comm="syz.8.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 258.759193][ T28] audit: type=1400 audit(2000000047.820:12220): avc: denied { name_bind } for pid=12185 comm="syz.8.2397" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 258.782433][ T28] audit: type=1400 audit(2000000047.820:12221): avc: denied { node_bind } for pid=12185 comm="syz.8.2397" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 258.836108][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.964630][T12207] loop3: detected capacity change from 0 to 128 [ 260.233516][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 260.233513][ T5235] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 260.704453][T12146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.779985][T12256] x_tables: duplicate underflow at hook 2 [ 260.802500][T12264] loop3: detected capacity change from 0 to 128 [ 260.829563][T12264] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.829717][T12264] ext4 filesystem being mounted at /499/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.843072][T12264] x_tables: duplicate underflow at hook 2 [ 260.897408][T12264] Invalid argument reading file caps for ./file0 [ 260.939425][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.070500][T12284] loop9: detected capacity change from 0 to 512 [ 261.106412][T12284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.146637][T12284] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.298154][T12284] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 261.569801][T12307] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2419'. [ 261.580782][T12307] netlink: zone id is out of range [ 261.586423][T12307] netlink: zone id is out of range [ 261.596150][T12307] netlink: zone id is out of range [ 261.763862][T12307] netlink: set zone limit has 8 unknown bytes [ 262.127221][T12313] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 262.242518][T12320] x_tables: duplicate underflow at hook 2 [ 262.278342][ T8955] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.304481][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 263.304507][ T28] audit: type=1400 audit(2000000052.490:12239): avc: denied { create } for pid=12335 comm="syz.6.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.309574][T12338] loop6: detected capacity change from 0 to 256 [ 263.310727][ T28] audit: type=1400 audit(2000000052.490:12240): avc: denied { setopt } for pid=12335 comm="syz.6.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 263.570898][ T28] audit: type=1400 audit(2000000052.730:12241): avc: denied { ioctl } for pid=12335 comm="syz.6.2431" path="socket:[37204]" dev="sockfs" ino=37204 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.596701][ T28] audit: type=1400 audit(2000000052.740:12242): avc: denied { write } for pid=12335 comm="syz.6.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 266.911517][ T28] audit: type=1400 audit(2000000056.090:12243): avc: denied { mount } for pid=12340 comm="syz.4.2432" name="/" dev="ramfs" ino=36837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 267.641029][ T28] audit: type=1400 audit(2000000056.800:12244): avc: denied { read write } for pid=12359 comm="syz.6.2433" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 267.699128][ T28] audit: type=1400 audit(2000000056.800:12245): avc: denied { open } for pid=12359 comm="syz.6.2433" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 267.724467][ T28] audit: type=1400 audit(2000000056.800:12246): avc: denied { ioctl } for pid=12359 comm="syz.6.2433" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 267.759742][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.768361][ T28] audit: type=1400 audit(2000000056.800:12247): avc: denied { write } for pid=12359 comm="syz.6.2433" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 267.796164][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.813565][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.827992][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.860059][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.868277][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.880045][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.888975][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.897506][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.906711][T12366] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 267.923540][T12373] x_tables: duplicate underflow at hook 2 [ 267.967269][T12381] serio: Serial port ttyS3 [ 268.000021][T12383] loop6: detected capacity change from 0 to 128 [ 268.037396][T12383] FAT-fs (loop6): Directory bread(block 32) failed [ 268.055270][T12383] FAT-fs (loop6): Directory bread(block 33) failed [ 268.084723][T12383] FAT-fs (loop6): Directory bread(block 34) failed [ 268.113510][T12383] FAT-fs (loop6): Directory bread(block 35) failed [ 268.114557][T12388] loop8: detected capacity change from 0 to 8192 [ 268.142481][T12383] FAT-fs (loop6): Directory bread(block 36) failed [ 268.150196][T12388] vfat: Unknown parameter '18446744073709551615' [ 268.162323][T12383] FAT-fs (loop6): Directory bread(block 37) failed [ 268.177499][T12387] loop9: detected capacity change from 0 to 8192 [ 268.188979][T12383] FAT-fs (loop6): Directory bread(block 38) failed [ 268.203699][T12383] FAT-fs (loop6): Directory bread(block 39) failed [ 268.210987][T12387] vfat: Unknown parameter '18446744073709551615' [ 268.231659][T12383] FAT-fs (loop6): Directory bread(block 40) failed [ 268.261120][ T28] audit: type=1400 audit(2000000057.440:12248): avc: denied { create } for pid=12378 comm="syz.8.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.270824][T12383] FAT-fs (loop6): Directory bread(block 41) failed [ 268.368188][ T28] audit: type=1400 audit(2000000057.440:12249): avc: denied { bind } for pid=12378 comm="syz.8.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.418183][ T28] audit: type=1400 audit(2000000057.440:12250): avc: denied { listen } for pid=12378 comm="syz.8.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.579942][ T28] audit: type=1400 audit(2000000057.760:12251): avc: denied { setopt } for pid=12397 comm="syz.6.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.318573][ T28] audit: type=1400 audit(2000000058.500:12252): avc: denied { create } for pid=12416 comm="syz.9.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 269.376658][T12419] serio: Serial port ttyS3 [ 269.380248][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2458'. [ 269.495475][ T28] audit: type=1400 audit(2000000058.670:12253): avc: denied { append } for pid=12425 comm="syz.8.2461" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 269.522858][T12421] Q6`Ҙ speed is unknown, defaulting to 1000 [ 269.535152][T12421] lo speed is unknown, defaulting to 1000 [ 269.680002][T12467] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 269.686833][T12467] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 269.710001][T12467] vhci_hcd vhci_hcd.0: Device attached [ 269.786512][T12474] loop8: detected capacity change from 0 to 1024 [ 269.804751][T12474] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 269.826967][T12474] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 269.902937][T12474] EXT4-fs (loop8): invalid journal inode [ 269.904655][ T28] audit: type=1400 audit(2000000059.080:12254): avc: denied { create } for pid=12475 comm="syz.3.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 269.915518][T12474] EXT4-fs (loop8): can't get journal size [ 269.938624][T12474] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.939028][T12476] syzkaller0: entered promiscuous mode [ 269.973714][T12468] vhci_hcd: connection closed [ 269.975022][ T310] vhci_hcd vhci_hcd.8: stop threads [ 269.985312][ T8086] usb 18-1: SetAddress Request (2) to port 0 [ 269.991421][ T8086] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 270.008180][ T310] vhci_hcd vhci_hcd.8: release socket [ 270.018363][T12476] syzkaller0: entered allmulticast mode [ 270.026607][ T310] vhci_hcd vhci_hcd.8: disconnect device [ 270.213487][ T28] audit: type=1400 audit(2000000059.390:12255): avc: denied { read } for pid=12472 comm="iou-wrk-12473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 270.273549][ T28] audit: type=1400 audit(2000000059.450:12256): avc: denied { setopt } for pid=12484 comm="syz.3.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.330707][ T28] audit: type=1400 audit(2000000059.500:12257): avc: denied { ioctl } for pid=12486 comm="syz.3.2470" path="socket:[37487]" dev="sockfs" ino=37487 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.357561][ T28] audit: type=1400 audit(2000000059.500:12258): avc: denied { read write } for pid=12486 comm="syz.3.2470" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 270.511019][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.583522][T12500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.596297][T12503] loop3: detected capacity change from 0 to 128 [ 270.616253][T12503] FAT-fs (loop3): bogus number of FAT sectors [ 270.634968][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2475'. [ 270.656135][T12503] FAT-fs (loop3): Can't find a valid FAT filesystem [ 270.683897][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2475'. [ 270.734421][T12505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.806179][T12500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.832353][T12500] bond1: (slave bond0): making interface the new active one [ 270.841855][T12500] bond1: (slave bond0): Enslaving as an active interface with an up link [ 270.877607][T12504] Q6`Ҙ speed is unknown, defaulting to 1000 [ 270.885078][T12504] lo speed is unknown, defaulting to 1000 [ 271.071109][T12511] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2478'. [ 271.284692][T12531] loop9: detected capacity change from 0 to 512 [ 271.431315][T12531] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.450346][T12508] loop8: detected capacity change from 0 to 128 [ 271.458325][T12531] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.677700][ T8955] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.755774][T12547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.793371][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2488'. [ 271.805911][T12545] loop6: detected capacity change from 0 to 8192 [ 271.825697][T12545] vfat: Unknown parameter '18446744073709551615' [ 271.834019][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2488'. [ 271.873447][T12547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.953522][T12547] bond3: (slave bond0): making interface the new active one [ 271.977494][T12547] bond3: (slave bond0): Enslaving as an active interface with an up link [ 272.023945][T12550] bond3: (slave bond0): Releasing active interface [ 272.063590][T12550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.209953][T12554] Q6`Ҙ speed is unknown, defaulting to 1000 [ 273.984111][T12554] lo speed is unknown, defaulting to 1000 [ 274.197444][T12508] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.219240][T12508] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.238230][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 274.238247][ T28] audit: type=1326 audit(2000000063.420:12320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.333585][ T28] audit: type=1326 audit(2000000063.450:12321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.430613][ T28] audit: type=1326 audit(2000000063.450:12322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.503495][ T28] audit: type=1326 audit(2000000063.450:12323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.556461][ T28] audit: type=1326 audit(2000000063.450:12324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.587973][T12585] loop6: detected capacity change from 0 to 128 [ 274.599067][T12585] FAT-fs (loop6): bogus number of FAT sectors [ 274.606938][T12585] FAT-fs (loop6): Can't find a valid FAT filesystem [ 274.614014][ T28] audit: type=1326 audit(2000000063.460:12325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.664414][ T28] audit: type=1326 audit(2000000063.460:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.717827][ T28] audit: type=1326 audit(2000000063.460:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.742535][ T28] audit: type=1326 audit(2000000063.460:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.742854][ T8654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.818550][ T28] audit: type=1326 audit(2000000063.460:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7ffc0000 [ 274.952437][T12579] Set syz1 is full, maxelem 65536 reached [ 274.955885][T12602] syzkaller0: entered promiscuous mode [ 274.964800][T12602] syzkaller0: entered allmulticast mode [ 275.043490][ T8086] usb 18-1: device descriptor read/8, error -110 [ 275.163501][ T8086] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 276.124342][ T8086] usb 18-1: enqueue for inactive port 0 [ 276.129976][ T8086] usb 18-1: enqueue for inactive port 0 [ 276.135589][ T8086] usb 18-1: enqueue for inactive port 0 [ 276.187230][T12631] loop6: detected capacity change from 0 to 128 [ 276.231917][T12631] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.413520][T12631] ext4 filesystem being mounted at /403/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 276.453911][T12631] Invalid argument reading file caps for ./file0 [ 276.472127][ T4045] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.929656][T12668] loop3: detected capacity change from 0 to 128 [ 277.960939][ T8086] usb usb18-port1: attempt power cycle [ 278.225372][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2532'. [ 278.234362][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2532'. [ 278.326556][T12677] loop9: detected capacity change from 0 to 8192 [ 278.361816][T12677] vfat: Unknown parameter '18446744073709551615' [ 278.825045][ T8293] bio_check_eod: 19 callbacks suppressed [ 278.825063][ T8293] kworker/u8:18: attempt to access beyond end of device [ 278.825063][ T8293] loop3: rw=1, sector=129, nr_sectors = 8 limit=128 [ 278.863116][ T8955] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 278.905710][ T8293] kworker/u8:18: attempt to access beyond end of device [ 278.905710][ T8293] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 278.923464][ T8955] CPU: 1 UID: 0 PID: 8955 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 278.923525][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.923538][ T8955] Call Trace: [ 278.923546][ T8955] [ 278.923563][ T8955] __dump_stack+0x1d/0x30 [ 278.923600][ T8955] dump_stack_lvl+0x95/0xd0 [ 278.923626][ T8955] dump_stack+0x15/0x1b [ 278.923707][ T8955] dump_header+0x80/0x240 [ 278.923773][ T8955] oom_kill_process+0x295/0x350 [ 278.923797][ T8955] out_of_memory+0x97d/0xb80 [ 278.923885][ T8955] try_charge_memcg+0x62e/0xa10 [ 278.923961][ T8955] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 278.924077][ T8955] __swap_cache_prepare_and_add+0x386/0x530 [ 278.924114][ T8955] swap_cache_alloc_folio+0xa2/0x120 [ 278.924146][ T8955] swap_cluster_readahead+0x26e/0x3d0 [ 278.924224][ T8955] swapin_readahead+0xde/0x840 [ 278.924248][ T8955] ? __rcu_read_unlock+0x4e/0x70 [ 278.924268][ T8955] ? __perf_event_task_sched_in+0xa65/0xad0 [ 278.924371][ T8955] ? __list_add_valid_or_report+0x38/0xe0 [ 278.924445][ T8955] ? xfd_validate_state+0x45/0xf0 [ 278.924513][ T8955] ? __rcu_read_unlock+0x4e/0x70 [ 278.924532][ T8955] ? swap_cache_get_folio+0x26f/0x280 [ 278.924556][ T8955] do_swap_page+0x30d/0x2220 [ 278.924600][ T8955] ? __schedule+0x93c/0xd40 [ 278.924626][ T8955] ? __rcu_read_lock+0x36/0x50 [ 278.924647][ T8955] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 278.924681][ T8955] handle_mm_fault+0xb40/0x3020 [ 278.924715][ T8955] ? vma_start_read+0x1c7/0x2c0 [ 278.924777][ T8955] do_user_addr_fault+0x62f/0x1050 [ 278.924808][ T8955] ? trace_page_fault_user+0x1f/0xe0 [ 278.924905][ T8955] exc_page_fault+0x62/0xa0 [ 278.924931][ T8955] asm_exc_page_fault+0x26/0x30 [ 278.924949][ T8955] RIP: 0033:0x7f56eb3b7917 [ 278.925030][ T8955] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 278.925095][ T8955] RSP: 002b:00007ffd7078d000 EFLAGS: 00010202 [ 278.925115][ T8955] RAX: 0000000000000000 RBX: 000055556f3fa500 RCX: 00007f56eb3b7917 [ 278.925130][ T8955] RDX: 00007ffd7078d040 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.925143][ T8955] RBP: 00007ffd7078d0ac R08: 0000000000000000 R09: 0000000000000000 [ 278.925155][ T8955] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 278.925227][ T8955] R13: 00000000000927c0 R14: 00000000000440ae R15: 00007ffd7078d100 [ 278.925247][ T8955] [ 278.925255][ T8955] memory: usage 281908kB, limit 307200kB, failcnt 655 [ 278.950320][ T8293] kworker/u8:18: attempt to access beyond end of device [ 278.950320][ T8293] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 278.986578][ T8955] memory+swap: usage 267284kB, limit 9007199254740988kB, failcnt 0 [ 279.067841][ T8293] kworker/u8:18: attempt to access beyond end of device [ 279.067841][ T8293] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 279.135496][ T8955] kmem: usage 225816kB, limit 9007199254740988kB, failcnt 0 [ 279.256933][ T8955] Memory cgroup stats for /syz9: [ 279.257306][ T8955] cache 0 [ 279.265734][ T8955] rss 0 [ 279.268508][ T8955] shmem 0 [ 279.271446][ T8955] mapped_file 0 [ 279.275042][ T8955] dirty 0 [ 279.278320][ T8955] writeback 0 [ 279.282111][ T8955] workingset_refault_anon 211 [ 279.288351][ T8955] workingset_refault_file 0 [ 279.294616][ T8955] swap 712704 [ 279.302330][ T8955] swapcached 6643712 [ 279.306525][ T8955] pgpgin 93537 [ 279.309534][ T8293] kworker/u8:18: attempt to access beyond end of device [ 279.309534][ T8293] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 279.324101][ T8955] pgpgout 93535 [ 279.327751][ T8955] pgfault 98793 [ 279.331221][ T8955] pgmajfault 106 [ 279.338079][ T8293] kworker/u8:18: attempt to access beyond end of device [ 279.338079][ T8293] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 279.373564][ T8955] inactive_anon 0 [ 279.373998][ T8293] kworker/u8:18: attempt to access beyond end of device [ 279.373998][ T8293] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 279.377283][ T8955] active_anon 4096 [ 279.409529][ T8293] kworker/u8:18: attempt to access beyond end of device [ 279.409529][ T8293] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 279.424896][ T8955] inactive_file 0 [ 279.428749][ T8955] active_file 4096 [ 279.443590][ T8293] kworker/u8:18: attempt to access beyond end of device [ 279.443590][ T8293] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 279.465110][ T8955] unevictable 0 [ 279.469094][ T8955] hierarchical_memory_limit 314572800 [ 279.474914][ T8955] hierarchical_memsw_limit 9223372036854771712 [ 279.481356][ T8955] total_cache 0 [ 279.485518][ T8955] total_rss 0 [ 279.506842][ T8955] total_shmem 0 [ 279.510365][ T8955] total_mapped_file 0 [ 279.526006][ T8955] total_dirty 0 [ 279.541088][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 279.550714][ T8955] total_writeback 0 [ 279.559260][ T8955] total_workingset_refault_anon 211 [ 279.565604][ T8955] total_workingset_refault_file 0 [ 279.571041][ T8955] total_swap 712704 [ 279.575082][T12710] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.575171][ T8955] total_swapcached 6643712 [ 279.586813][ T8955] total_pgpgin 93537 [ 279.590828][ T8955] total_pgpgout 93535 [ 279.595184][ T8955] total_pgfault 98793 [ 279.599239][ T8955] total_pgmajfault 106 [ 279.603675][ T8955] total_inactive_anon 0 [ 279.608200][ T8955] total_active_anon 4096 [ 279.612601][ T8955] total_inactive_file 0 [ 279.617043][T12715] wireguard0: entered promiscuous mode [ 279.617313][ T8955] total_active_file 4096 [ 279.623041][T12715] wireguard0: entered allmulticast mode [ 279.627640][ T8955] total_unevictable 0 [ 279.637635][ T8955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2528,pid=12671,uid=0 [ 279.653279][ T8955] Memory cgroup out of memory: Killed process 12671 (syz.9.2528) total-vm:94292kB, anon-rss:1232kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 279.698421][T12712] Q6`Ҙ speed is unknown, defaulting to 1000 [ 279.707870][T12712] lo speed is unknown, defaulting to 1000 [ 279.870107][T12730] loop9: detected capacity change from 0 to 256 [ 279.899080][T12730] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.921649][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 279.921667][ T28] audit: type=1400 audit(2000000069.100:12386): avc: denied { relabelfrom } for pid=12731 comm="syz.6.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 279.952107][T12732] syzkaller0: entered promiscuous mode [ 279.959458][T12732] syzkaller0: entered allmulticast mode [ 279.989764][ T28] audit: type=1400 audit(2000000069.100:12387): avc: denied { relabelto } for pid=12731 comm="syz.6.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.043509][ T28] audit: type=1400 audit(2000000069.140:12388): avc: denied { bind } for pid=12720 comm="syz.4.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.074950][T12739] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 280.092544][T12736] loop3: detected capacity change from 0 to 512 [ 280.106158][T12739] FAT-fs (loop9): Filesystem has been set read-only [ 280.129897][T12739] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008) [ 280.163240][T12747] FAULT_INJECTION: forcing a failure. [ 280.163240][T12747] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 280.203817][T12747] CPU: 0 UID: 0 PID: 12747 Comm: syz.3.2554 Not tainted syzkaller #0 PREEMPT(full) [ 280.203851][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.203866][T12747] Call Trace: [ 280.203874][T12747] [ 280.203884][T12747] __dump_stack+0x1d/0x30 [ 280.203944][T12747] dump_stack_lvl+0x95/0xd0 [ 280.203969][T12747] dump_stack+0x15/0x1b [ 280.203996][T12747] should_fail_ex+0x263/0x280 [ 280.204024][T12747] should_fail_alloc_page+0xf2/0x100 [ 280.204124][T12747] __alloc_frozen_pages_noprof+0x108/0x360 [ 280.204157][T12747] alloc_pages_mpol+0xb3/0x260 [ 280.204202][T12747] alloc_pages_noprof+0x8f/0x130 [ 280.204234][T12747] pte_alloc_one+0x1e/0xd0 [ 280.204253][T12747] handle_mm_fault+0x15af/0x3020 [ 280.204371][T12747] ? lock_mm_and_find_vma+0x8b/0x440 [ 280.204396][T12747] do_user_addr_fault+0x3fd/0x1050 [ 280.204434][T12747] exc_page_fault+0x62/0xa0 [ 280.204493][T12747] asm_exc_page_fault+0x26/0x30 [ 280.204543][T12747] RIP: 0010:strncpy_from_user+0xa4/0x250 [ 280.204583][T12747] Code: c3 50 ff 49 83 ff 07 0f 86 85 00 00 00 48 c7 04 24 00 00 00 00 4c 89 64 24 10 48 8b 6c 24 08 4c 89 7c 24 18 4d 89 fd 4d 89 e6 <4d> 8b 24 24 48 b8 ff fe fe fe fe fe fe fe 4d 8d 3c 04 4c 89 e3 48 [ 280.204605][T12747] RSP: 0018:ffffc900016c3de0 EFLAGS: 00050202 [ 280.204627][T12747] RAX: ffffffff82088c4d RBX: ffff8881444cd9c0 RCX: ffff88810a7e0000 [ 280.204643][T12747] RDX: 0000000000000000 RSI: 00000000000000a8 RDI: 0000000000000007 [ 280.204725][T12747] RBP: ffff8881444cd9d8 R08: 00018881444cd9c7 R09: 0000000000000000 [ 280.204788][T12747] R10: ffff8881444cd9c0 R11: 0001c900016c3e98 R12: 0000200000000180 [ 280.204803][T12747] R13: 00000000000000a8 R14: 0000200000000180 R15: 00000000000000a8 [ 280.204821][T12747] ? strncpy_from_user+0x7d/0x250 [ 280.205006][T12747] do_getname+0x59/0x1c0 [ 280.205034][T12747] getname_flags+0x1d/0x30 [ 280.205060][T12747] __se_sys_acct+0x7a/0x500 [ 280.205105][T12747] __x64_sys_acct+0x1f/0x30 [ 280.205172][T12747] x64_sys_call+0x2e7f/0x3020 [ 280.205204][T12747] do_syscall_64+0x12c/0x370 [ 280.205229][T12747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.205254][T12747] RIP: 0033:0x7f8d7ff2c799 [ 280.205279][T12747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.205298][T12747] RSP: 002b:00007f8d7e97f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 280.205318][T12747] RAX: ffffffffffffffda RBX: 00007f8d801a5fa0 RCX: 00007f8d7ff2c799 [ 280.205336][T12747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 280.205352][T12747] RBP: 00007f8d7e97f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.205434][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.205446][T12747] R13: 00007f8d801a6038 R14: 00007f8d801a5fa0 R15: 00007ffe9d3fc5e8 [ 280.205465][T12747] [ 280.515742][T12743] Q6`Ҙ speed is unknown, defaulting to 1000 [ 280.553616][T12743] lo speed is unknown, defaulting to 1000 [ 280.561040][T12734] Process accounting resumed [ 280.573488][T12734] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 280.656067][T12756] loop6: detected capacity change from 0 to 128 [ 280.672477][T12753] loop3: detected capacity change from 0 to 8192 [ 280.693832][T12753] vfat: Unknown parameter '18446744073709551615' [ 280.707403][ T35] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779264) [ 280.716377][ T8086] usb usb18-port1: unable to enumerate USB device [ 280.730893][T12756] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.763695][T12756] ext4 filesystem being mounted at /417/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 280.838577][T12756] Invalid argument reading file caps for ./file0 [ 280.885205][ T4045] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.941032][T12766] loop8: detected capacity change from 0 to 256 [ 280.974225][T12771] validate_nla: 35 callbacks suppressed [ 280.974240][T12771] netlink: 'syz.9.2563': attribute type 7 has an invalid length. [ 280.993955][T12766] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 281.005298][T12766] FAT-fs (loop8): Filesystem has been set read-only [ 281.013609][T12771] netlink: 140 bytes leftover after parsing attributes in process `syz.9.2563'. [ 281.035370][T12766] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 281.050157][T12766] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 283.193203][ T28] audit: type=1400 audit(2000000072.370:12389): avc: denied { map } for pid=13035 comm="syz.6.2578" path="/proc/1385/coredump_filter" dev="proc" ino=38474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 283.293479][ T28] audit: type=1400 audit(2000000072.410:12390): avc: denied { bind } for pid=13037 comm="syz.6.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.330669][ T28] audit: type=1400 audit(2000000072.410:12391): avc: denied { listen } for pid=13037 comm="syz.6.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.413071][ T28] audit: type=1400 audit(2000000072.410:12392): avc: denied { connect } for pid=13037 comm="syz.6.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.434311][ T28] audit: type=1400 audit(2000000072.410:12393): avc: denied { setopt } for pid=13037 comm="syz.6.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 283.459080][ T28] audit: type=1400 audit(2000000072.570:12394): avc: denied { read } for pid=13048 comm="syz.6.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.525947][T13049] Q6`Ҙ speed is unknown, defaulting to 1000 [ 283.694295][ T28] audit: type=1400 audit(2000000072.850:12395): avc: denied { getopt } for pid=13048 comm="syz.6.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.733257][T13049] lo speed is unknown, defaulting to 1000 [ 284.431670][T13146] xt_hashlimit: size too large, truncated to 1048576 [ 284.497861][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2586'. [ 284.549393][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2586'. [ 284.621398][ T8299] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.646408][ T8299] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.679971][ T8299] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.723940][ T8299] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.185588][T13199] loop9: detected capacity change from 0 to 8192 [ 285.235480][T13199] vfat: Unknown parameter '18446744073709551615' [ 285.304798][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 285.304816][ T28] audit: type=1400 audit(2000000074.490:12397): avc: denied { wake_alarm } for pid=13203 comm="syz.6.2593" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 285.386911][T13217] dummy0: entered promiscuous mode [ 285.392297][T13217] vlan0: entered promiscuous mode [ 286.343965][T13242] loop8: detected capacity change from 0 to 512 [ 286.355705][T13242] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 286.457659][T13242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.557749][T13242] block device autoloading is deprecated and will be removed. [ 286.612681][T13242] EXT4-fs (loop8): couldn't read superblock of external journal [ 286.766743][ T28] audit: type=1400 audit(2000000075.920:12398): avc: denied { ioctl } for pid=13241 comm="syz.8.2607" path="socket:[38730]" dev="sockfs" ino=38730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.836264][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 286.887480][ T28] audit: type=1400 audit(2000000075.920:12399): avc: denied { connect } for pid=13241 comm="syz.8.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.959593][T13259] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 286.974040][ T28] audit: type=1400 audit(2000000075.920:12400): avc: denied { write } for pid=13241 comm="syz.8.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.014324][T13259] SELinux: failed to load policy [ 287.065205][ T28] audit: type=1400 audit(2000000076.110:12401): avc: denied { load_policy } for pid=13254 comm="syz.6.2613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 287.656046][ T28] audit: type=1400 audit(2000000076.840:12402): avc: denied { shutdown } for pid=13265 comm="syz.8.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 287.766789][ T28] audit: type=1400 audit(2000000076.860:12403): avc: denied { read } for pid=13265 comm="syz.8.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 287.984246][T13291] xt_hashlimit: size too large, truncated to 1048576 [ 288.046786][ T28] audit: type=1400 audit(2000000077.220:12404): avc: denied { write } for pid=13290 comm="syz.9.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.092090][T13295] Q6`Ҙ speed is unknown, defaulting to 1000 [ 288.150035][T13295] lo speed is unknown, defaulting to 1000 [ 288.175313][T13284] Q6`Ҙ speed is unknown, defaulting to 1000 [ 288.223511][T13284] lo speed is unknown, defaulting to 1000 [ 288.333717][T13304] loop3: detected capacity change from 0 to 128 [ 288.547624][ T28] audit: type=1400 audit(2000000077.730:12405): avc: denied { accept } for pid=13315 comm="syz.3.2637" lport=57116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.704421][ T28] audit: type=1400 audit(2000000077.730:12406): avc: denied { read } for pid=13315 comm="syz.3.2637" lport=57116 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 288.936672][T13342] xt_hashlimit: size too large, truncated to 1048576 [ 288.998124][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2646'. [ 289.049724][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2646'. [ 289.369033][T13361] Invalid argument reading file caps for ./file0 [ 289.423527][T13362] loop6: detected capacity change from 0 to 4096 [ 289.442383][T13362] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 289.489542][T13368] loop9: detected capacity change from 0 to 128 [ 289.527056][T13368] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 289.602743][T13376] Q6`Ҙ speed is unknown, defaulting to 1000 [ 289.610220][T13376] lo speed is unknown, defaulting to 1000 [ 289.881651][T13391] loop3: detected capacity change from 0 to 2048 [ 289.910703][T13391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.236748][T13408] loop6: detected capacity change from 0 to 8192 [ 290.266837][T13408] vfat: Unknown parameter '18446744073709551615' [ 290.334699][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2669'. [ 290.476004][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 290.476023][ T28] audit: type=1400 audit(2000000079.660:12422): avc: denied { append } for pid=13428 comm="syz.9.2673" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 290.571098][T13405] syz.6.2666 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 290.623447][ T28] audit: type=1326 audit(2000000079.760:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13430 comm="syz.9.2675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f56eb3f6517 code=0x0 [ 290.647013][T13405] CPU: 1 UID: 0 PID: 13405 Comm: syz.6.2666 Not tainted syzkaller #0 PREEMPT(full) [ 290.647042][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.647053][T13405] Call Trace: [ 290.647059][T13405] [ 290.647067][T13405] __dump_stack+0x1d/0x30 [ 290.647170][T13405] dump_stack_lvl+0x95/0xd0 [ 290.647242][T13405] dump_stack+0x15/0x1b [ 290.647265][T13405] dump_header+0x80/0x240 [ 290.647285][T13405] oom_kill_process+0x295/0x350 [ 290.647437][T13405] out_of_memory+0x97d/0xb80 [ 290.647464][T13405] try_charge_memcg+0x62e/0xa10 [ 290.647502][T13405] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 290.647582][T13405] __swap_cache_prepare_and_add+0x386/0x530 [ 290.647694][T13405] swap_cache_alloc_folio+0xa2/0x120 [ 290.647724][T13405] swap_cluster_readahead+0x26e/0x3d0 [ 290.647763][T13405] swapin_readahead+0xde/0x840 [ 290.647829][T13405] ? __rcu_read_unlock+0x4e/0x70 [ 290.647856][T13405] ? swap_cache_get_folio+0x26f/0x280 [ 290.647885][T13405] do_swap_page+0x30d/0x2220 [ 290.647919][T13405] ? css_rstat_updated+0xbb/0x280 [ 290.648018][T13405] ? __rcu_read_lock+0x36/0x50 [ 290.648041][T13405] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 290.648107][T13405] handle_mm_fault+0xb40/0x3020 [ 290.648140][T13405] ? vma_start_read+0x1c7/0x2c0 [ 290.648173][T13405] do_user_addr_fault+0x62f/0x1050 [ 290.648211][T13405] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 290.648278][T13405] ? trace_page_fault_user+0x1f/0xe0 [ 290.648307][T13405] exc_page_fault+0x62/0xa0 [ 290.648372][T13405] asm_exc_page_fault+0x26/0x30 [ 290.648396][T13405] RIP: 0033:0x7f0d560759d0 [ 290.648416][T13405] Code: 00 00 45 31 d2 48 83 b8 88 00 00 00 ff 41 b9 03 00 00 00 ba 01 00 00 00 0f 85 59 ff ff ff eb ca 66 2e 0f 1f 84 00 00 00 00 00 <80> 3d 0e fd ed 00 00 74 40 80 3d f3 fc ed 00 00 74 2e 80 3d f6 fc [ 290.648438][T13405] RSP: 002b:00007ffe6603c808 EFLAGS: 00010206 [ 290.648457][T13405] RAX: 0000001b31624000 RBX: 00007f0d56426180 RCX: 0000001b31624000 [ 290.648470][T13405] RDX: 0000000000000016 RSI: 0000000000000017 RDI: 0000001b31a23fb6 [ 290.648556][T13405] RBP: 00007f0d56427da0 R08: 00000000003ffc4c R09: 0000000000000006 [ 290.648573][T13405] R10: 0000001b3162421c R11: 000000000000000a R12: 00007f0d56426090 [ 290.648588][T13405] R13: 00007f0d5642618c R14: 0000000000046e51 R15: 00007ffe6603c960 [ 290.648607][T13405] [ 290.648673][T13405] memory: usage 276552kB, limit 307200kB, failcnt 1080 [ 291.005419][T13405] memory+swap: usage 50108kB, limit 9007199254740988kB, failcnt 0 [ 291.013285][T13405] kmem: usage 49180kB, limit 9007199254740988kB, failcnt 0 [ 291.020754][T13405] Memory cgroup stats for /syz6: [ 291.021077][T13405] cache 0 [ 291.029142][T13405] rss 4096 [ 291.032209][T13405] shmem 0 [ 291.035436][T13405] mapped_file 0 [ 291.039002][T13405] dirty 0 [ 291.049189][T13405] writeback 4096 [ 291.052786][T13405] workingset_refault_anon 336 [ 291.057495][T13405] workingset_refault_file 444 [ 291.062269][T13405] swap 901120 [ 291.065608][T13405] swapcached 12021760 [ 291.069852][T13405] pgpgin 251789 [ 291.073785][T13405] pgpgout 251786 [ 291.077544][T13405] pgfault 238651 [ 291.081212][T13405] pgmajfault 194 [ 291.085066][T13405] inactive_anon 8192 [ 291.089234][T13405] active_anon 0 [ 291.092709][T13405] inactive_file 4096 [ 291.096634][T13405] active_file 0 [ 291.100468][T13405] unevictable 0 [ 291.104300][T13405] hierarchical_memory_limit 314572800 [ 291.109855][T13405] hierarchical_memsw_limit 9223372036854771712 [ 291.116852][T13405] total_cache 0 [ 291.120524][T13405] total_rss 4096 [ 291.124394][T13405] total_shmem 0 [ 291.128076][T13405] total_mapped_file 0 [ 291.132202][T13405] total_dirty 0 [ 291.135954][T13405] total_writeback 4096 [ 291.140100][T13405] total_workingset_refault_anon 336 [ 291.146074][T13405] total_workingset_refault_file 444 [ 291.151639][T13405] total_swap 901120 [ 291.155765][T13405] total_swapcached 12021760 [ 291.160459][T13405] total_pgpgin 251789 [ 291.173450][T13405] total_pgpgout 251786 [ 291.177637][T13405] total_pgfault 238651 [ 291.181810][T13405] total_pgmajfault 194 [ 291.192346][T13405] total_inactive_anon 8192 [ 291.197621][T13405] total_active_anon 0 [ 291.202160][T13405] total_inactive_file 4096 [ 291.206941][T13405] total_active_file 0 [ 291.211063][T13405] total_unevictable 0 [ 291.215162][T13405] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2666,pid=13405,uid=0 [ 291.230547][T13405] Memory cgroup out of memory: Killed process 13405 (syz.6.2666) total-vm:94292kB, anon-rss:1228kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 291.282614][T13440] loop6: detected capacity change from 0 to 1024 [ 291.291826][T13440] EXT4-fs: test_dummy_encryption option not supported [ 291.434564][ T28] audit: type=1400 audit(2000000080.620:12424): avc: denied { nosuid_transition } for pid=13439 comm="syz.6.2676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 291.483847][ T1891] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 291.510735][ T28] audit: type=1400 audit(2000000080.620:12425): avc: denied { transition } for pid=13439 comm="syz.6.2676" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 291.543473][ T1891] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 136 with error 28 [ 291.558680][ T1891] EXT4-fs (loop3): This should not happen!! Data will be lost [ 291.558680][ T1891] [ 291.583501][ T28] audit: type=1400 audit(2000000080.620:12426): avc: denied { entrypoint } for pid=13439 comm="syz.6.2676" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1461 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.585442][ T1891] EXT4-fs (loop3): Total free blocks count 0 [ 291.638670][T13451] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 291.693436][ T1891] EXT4-fs (loop3): Free/Dirty block details [ 291.700051][ T1891] EXT4-fs (loop3): free_blocks=2415919504 [ 291.715041][ T1891] EXT4-fs (loop3): dirty_blocks=144 [ 291.732688][ T28] audit: type=1400 audit(2000000080.620:12427): avc: denied { share } for pid=13439 comm="syz.6.2676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 291.815259][ T1891] EXT4-fs (loop3): Block reservation details [ 291.821763][ T1891] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 291.831042][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.842540][ T28] audit: type=1400 audit(2000000080.620:12428): avc: denied { noatsecure } for pid=13439 comm="syz.6.2676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 292.011377][T13464] loop8: detected capacity change from 0 to 128 [ 292.080711][ T28] audit: type=1400 audit(2000000081.260:12429): avc: denied { ioctl } for pid=13462 comm="syz.3.2679" path="socket:[40193]" dev="sockfs" ino=40193 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.292328][T13465] syzkaller0: entered promiscuous mode [ 292.349114][T13465] syzkaller0: entered allmulticast mode [ 292.434739][ T28] audit: type=1400 audit(2000000081.610:12430): avc: denied { write } for pid=13470 comm="syz.9.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.465978][T13477] loop6: detected capacity change from 0 to 512 [ 292.476249][ T28] audit: type=1400 audit(2000000081.660:12431): avc: denied { listen } for pid=13470 comm="syz.9.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.501338][T13477] EXT4-fs (loop6): blocks per group (32768) and clusters per group (14) inconsistent [ 292.635537][T13488] loop6: detected capacity change from 0 to 512 [ 292.654086][T13488] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2693: bg 0: block 4: invalid block bitmap [ 292.668873][T13488] loop6: lost filesystem error report for type 5 error -117 [ 292.668978][T13488] EXT4-fs (loop6): Remounting filesystem read-only [ 292.676611][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 292.676637][ C1] EXT4-fs (loop6): initial error at time 2000000081: ext4_validate_block_bitmap:432 [ 292.676666][ C1] EXT4-fs (loop6): last error at time 2000000081: ext4_validate_block_bitmap:432 [ 292.711705][T13488] EXT4-fs (loop6): 1 truncate cleaned up [ 292.718447][T13488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.829031][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.003714][T13514] loop6: detected capacity change from 0 to 512 [ 294.029830][T13514] EXT4-fs: inline encryption not supported [ 294.083032][T13514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.126921][T13514] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 294.129172][T13520] netlink: 'syz.4.2702': attribute type 20 has an invalid length. [ 294.194103][T13514] EXT4-fs (loop6): orphan cleanup on readonly fs [ 294.210583][T13514] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2697: Allocating blocks 41-42 which overlap fs metadata [ 294.260131][T13514] loop6: lost filesystem error report for type 5 error -117 [ 294.260241][T13514] EXT4-fs (loop6): Remounting filesystem read-only [ 294.267843][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 294.267860][ C0] EXT4-fs (loop6): initial error at time 2000000083: ext4_mb_mark_diskspace_used:4222 [ 294.267887][ C0] EXT4-fs (loop6): last error at time 2000000083: ext4_mb_mark_diskspace_used:4222 [ 294.390100][T13514] EXT4-fs (loop6): 1 truncate cleaned up [ 294.410766][T13514] EXT4-fs (loop6): pa ffff888107e7b0e0: logic 1, phys. 41, len 23 [ 294.438012][T13514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.490615][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2697'. [ 294.575598][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.663641][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 294.718872][T13529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13529 comm=syz.6.2703 [ 294.843019][T13535] netlink: 'syz.9.2708': attribute type 21 has an invalid length. [ 294.872191][T13535] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2708'. [ 294.976664][T13544] loop6: detected capacity change from 0 to 1764 [ 295.097702][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 295.134864][T13550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13550 comm=syz.6.2713 [ 295.163482][T13524] loop3: detected capacity change from 0 to 164 [ 295.413021][T13524] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 295.448493][T13559] Q6`Ҙ speed is unknown, defaulting to 1000 [ 295.465876][T13559] lo speed is unknown, defaulting to 1000 [ 297.022170][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 297.022187][ T28] audit: type=1400 audit(2000000086.190:12440): avc: denied { connect } for pid=13575 comm="syz.4.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 297.115039][ T28] audit: type=1400 audit(2000000086.270:12441): avc: denied { bind } for pid=13575 comm="syz.4.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 297.317890][ T28] audit: type=1400 audit(2000000086.500:12442): avc: denied { mounton } for pid=13593 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 297.513009][T13593] Q6`Ҙ speed is unknown, defaulting to 1000 [ 297.533891][T13593] lo speed is unknown, defaulting to 1000 [ 297.600370][T13593] chnl_net:caif_netlink_parms(): no params data found [ 297.660358][T13593] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.675434][T13593] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.693496][T13593] bridge_slave_0: entered allmulticast mode [ 297.709622][T13593] bridge_slave_0: entered promiscuous mode [ 297.724005][T13593] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.740343][T13593] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.755823][T13593] bridge_slave_1: entered allmulticast mode [ 297.769117][T13593] bridge_slave_1: entered promiscuous mode [ 297.837576][T13593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.872126][T13593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.927579][T13593] team0: Port device team_slave_0 added [ 297.943556][T13593] team0: Port device team_slave_1 added [ 297.991369][T13609] xt_policy: output policy not valid in PREROUTING and INPUT [ 297.995342][T13593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.036931][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.126671][T13593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.208409][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 298.320834][T13613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.356883][T13613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.401426][T13613] tipc: Resetting bearer [ 298.465448][T13593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.495811][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.564647][ T28] audit: type=1400 audit(2000000087.730:12443): avc: denied { create } for pid=13718 comm="syz.3.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 298.600687][T13593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.625776][ T28] audit: type=1400 audit(2000000087.750:12444): avc: denied { bind } for pid=13718 comm="syz.3.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 298.648038][ T3412] Q6`Ҙ speed is unknown, defaulting to 1000 [ 298.666360][ T3412] syz0: Port: 1 Link DOWN [ 298.673100][ T8293] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.696488][ T8293] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.739969][T13593] hsr_slave_0: entered promiscuous mode [ 298.748080][T13593] hsr_slave_1: entered promiscuous mode [ 298.759166][T13593] debugfs: 'hsr0' already exists in 'hsr' [ 298.765153][T13593] Cannot create hsr debugfs directory [ 298.771854][ T8293] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.782668][ T8293] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.820766][ T8293] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.853476][ T8293] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.862984][ T8293] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.883495][ T8293] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.077187][ T28] audit: type=1326 audit(2000000088.260:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13734 comm="syz.3.2739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f8d7ff2c799 code=0x0 [ 299.165301][T13742] loop6: detected capacity change from 0 to 512 [ 299.198291][T13742] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 299.233666][T13742] EXT4-fs (loop6): 1 truncate cleaned up [ 299.239921][T13742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.304470][ T28] audit: type=1400 audit(2000000088.490:12446): avc: denied { create } for pid=13741 comm="syz.6.2741" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 299.350013][T13593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.378841][T13593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.417846][T13593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.458121][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.473199][T13749] loop3: detected capacity change from 0 to 8192 [ 299.481657][T13593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.500445][T13749] vfat: Unknown parameter '18446744073709551615' [ 299.537434][ T28] audit: type=1400 audit(2000000088.720:12447): avc: denied { sqpoll } for pid=13755 comm="syz.6.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 299.732646][T13593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.781934][T13593] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.806440][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.813926][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.863988][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.871769][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.915921][ T28] audit: type=1326 audit(2000000089.090:12448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.6.2749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d561ac799 code=0x7fbc0000 [ 300.098028][T13593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.161973][T13769] syz.3.2742 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 300.196209][T13769] CPU: 0 UID: 0 PID: 13769 Comm: syz.3.2742 Not tainted syzkaller #0 PREEMPT(full) [ 300.196242][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.196253][T13769] Call Trace: [ 300.196260][T13769] [ 300.196268][T13769] __dump_stack+0x1d/0x30 [ 300.196295][T13769] dump_stack_lvl+0x95/0xd0 [ 300.196375][T13769] dump_stack+0x15/0x1b [ 300.196465][T13769] dump_header+0x80/0x240 [ 300.196493][T13769] oom_kill_process+0x295/0x350 [ 300.196516][T13769] out_of_memory+0x97d/0xb80 [ 300.196616][T13769] try_charge_memcg+0x62e/0xa10 [ 300.196735][T13769] __mem_cgroup_charge+0x65/0x150 [ 300.196796][T13769] shmem_get_folio_gfp+0x47b/0xd60 [ 300.196898][T13769] shmem_fault+0xf6/0x250 [ 300.197012][T13769] __do_fault+0xbc/0x200 [ 300.197034][T13769] handle_mm_fault+0x11d7/0x3020 [ 300.197075][T13769] do_user_addr_fault+0x3fd/0x1050 [ 300.197163][T13769] exc_page_fault+0x62/0xa0 [ 300.197199][T13769] asm_exc_page_fault+0x26/0x30 [ 300.197219][T13769] RIP: 0010:fault_in_readable+0xad/0x170 [ 300.197293][T13769] Code: 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 f6 c8 d3 ff 4d 39 f7 0f 97 c0 40 84 c5 74 51 4c 8d 64 24 07 4c 89 f5 <44> 8a 6d 00 4c 89 e7 e8 c7 6b f0 ff 44 88 6c 24 07 48 81 e5 00 f0 [ 300.197326][T13769] RSP: 0018:ffffc90001ea7b78 EFLAGS: 00050202 [ 300.197347][T13769] RAX: ffffffff81858401 RBX: 0000000000000a00 RCX: ffff8881049bc300 [ 300.197361][T13769] RDX: 0000000000000002 RSI: 0000200000047000 RDI: 0000200000047a00 [ 300.197374][T13769] RBP: 0000200000047000 R08: 0001c90001ea7d8f R09: 0000000000000000 [ 300.197403][T13769] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc90001ea7b7f [ 300.197415][T13769] R13: 0000000000048600 R14: 0000200000047000 R15: 0000200000047a00 [ 300.197430][T13769] ? fault_in_readable+0x51/0x170 [ 300.197490][T13769] ? fault_in_readable+0x9a/0x170 [ 300.197645][T13769] fault_in_iov_iter_readable+0x129/0x210 [ 300.197692][T13769] generic_perform_write+0x3ce/0x490 [ 300.197771][T13769] shmem_file_write_iter+0xc5/0xf0 [ 300.197849][T13769] do_iter_readv_writev+0x4fd/0x5a0 [ 300.197869][T13769] vfs_writev+0x2e1/0x900 [ 300.197941][T13769] __se_sys_pwritev2+0xfc/0x1c0 [ 300.197961][T13769] __x64_sys_pwritev2+0x67/0x80 [ 300.197980][T13769] x64_sys_call+0xe07/0x3020 [ 300.198064][T13769] do_syscall_64+0x12c/0x370 [ 300.198082][T13769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.198101][T13769] RIP: 0033:0x7f8d7ff2c799 [ 300.198174][T13769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.198189][T13769] RSP: 002b:00007f8d7e93d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 300.198206][T13769] RAX: ffffffffffffffda RBX: 00007f8d801a6180 RCX: 00007f8d7ff2c799 [ 300.198218][T13769] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000000 [ 300.198302][T13769] RBP: 00007f8d7ffc2bd9 R08: 0000000000000000 R09: 0000000000000003 [ 300.198313][T13769] R10: 0000000000001600 R11: 0000000000000246 R12: 0000000000000000 [ 300.198325][T13769] R13: 00007f8d801a6218 R14: 00007f8d801a6180 R15: 00007ffe9d3fc5e8 [ 300.198379][T13769] [ 300.198388][T13769] memory: usage 307200kB, limit 307200kB, failcnt 5859 [ 300.583376][T13769] memory+swap: usage 374912kB, limit 9007199254740988kB, failcnt 0 [ 300.592109][T13769] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 300.634063][T13769] Memory cgroup stats for /syz3: [ 300.634379][T13769] cache 0 [ 300.642906][T13769] rss 4096 [ 300.657391][T13593] veth0_vlan: entered promiscuous mode [ 300.678419][T13593] veth1_vlan: entered promiscuous mode [ 300.684037][T13769] shmem 0 [ 300.687155][T13769] mapped_file 0 [ 300.690871][T13769] dirty 0 [ 300.713960][T13769] writeback 0 [ 300.717720][T13769] workingset_refault_anon 252 [ 300.722580][T13769] workingset_refault_file 2296 [ 300.744620][T13593] veth0_macvtap: entered promiscuous mode [ 300.752628][T13593] veth1_macvtap: entered promiscuous mode [ 300.759068][T13769] swap 69337088 [ 300.762972][T13769] swapcached 70197248 [ 300.780813][T13593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.783477][T13769] pgpgin 297618 [ 300.792103][T13769] pgpgout 297616 [ 300.796029][T13769] pgfault 264774 [ 300.800146][T13769] pgmajfault 208 [ 300.804185][T13593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.812061][T13769] inactive_anon 0 [ 300.823469][T13769] active_anon 4096 [ 300.827427][T13769] inactive_file 0 [ 300.830472][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.831104][T13769] active_file 4096 [ 300.831116][T13769] unevictable 0 [ 300.831126][T13769] hierarchical_memory_limit 314572800 [ 300.854412][ T8293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.873999][ T8293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.894429][ T8293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.913468][T13769] hierarchical_memsw_limit 9223372036854771712 [ 300.925491][T13769] total_cache 0 [ 300.929036][T13769] total_rss 4096 [ 300.939867][ T28] audit: type=1400 audit(2000000090.110:12449): avc: denied { mounton } for pid=13593 comm="syz-executor" path="/root/syzkaller.Px2rlB/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 300.940161][T13769] total_shmem 0 [ 301.013657][T13769] total_mapped_file 0 [ 301.023481][T13769] total_dirty 0 [ 301.027206][T13769] total_writeback 0 [ 301.034128][T13769] total_workingset_refault_anon 252 [ 301.039531][T13769] total_workingset_refault_file 2296 [ 301.055716][T13769] total_swap 69337088 [ 301.064180][T13769] total_swapcached 70197248 [ 301.074317][T13769] total_pgpgin 297618 [ 301.082933][T13769] total_pgpgout 297616 [ 301.091744][T13769] total_pgfault 264774 [ 301.096939][T13769] total_pgmajfault 208 [ 301.101754][T13769] total_inactive_anon 0 [ 301.106817][T13769] total_active_anon 4096 [ 301.111195][T13769] total_inactive_file 0 [ 301.116057][T13769] total_active_file 4096 [ 301.120731][T13769] total_unevictable 0 [ 301.125233][T13769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2742,pid=13744,uid=0 [ 301.141404][T13769] Memory cgroup out of memory: Killed process 13744 (syz.3.2742) total-vm:94292kB, anon-rss:1224kB, file-rss:22552kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 301.360754][T13807] tipc: Failed to remove unknown binding: 66,1,1/9611946:3013958727/3013958729 [ 301.383469][T13807] tipc: Failed to remove unknown binding: 66,1,1/9611946:3013958727/3013958729 [ 302.484268][T13818] loop8: detected capacity change from 0 to 4096 [ 302.573144][T13818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.146987][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.278011][T13832] SET target dimension over the limit! [ 303.328071][T13832] loop6: detected capacity change from 0 to 4096 [ 303.348731][T13832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.430405][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 303.430429][ T28] audit: type=1326 audit(2000000092.610:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.3.2766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d7ff2c799 code=0x0 [ 303.534620][T13846] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2751'. [ 303.538580][ T28] audit: type=1400 audit(2000000092.670:12456): avc: denied { read } for pid=13830 comm="syz.6.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 303.554288][T13846] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2751'. [ 303.594141][T13850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2766'. [ 303.603674][T13850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2766'. [ 303.638389][T13850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2766'. [ 303.649477][ T28] audit: type=1400 audit(2000000092.840:12457): avc: denied { ioctl } for pid=13840 comm="syz.3.2766" path="socket:[41077]" dev="sockfs" ino=41077 ioctlcmd=0x542b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 303.806462][T13856] loop9: detected capacity change from 0 to 512 [ 303.838312][T13856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.866692][T13856] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.912137][ T8955] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.046500][ T28] audit: type=1400 audit(2000000093.230:12458): avc: denied { read } for pid=13862 comm="syz.9.2772" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.096673][ T28] audit: type=1400 audit(2000000093.250:12459): avc: denied { open } for pid=13862 comm="syz.9.2772" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.296965][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.371007][T13873] loop8: detected capacity change from 0 to 512 [ 304.397857][T13873] EXT4-fs: Ignoring removed bh option [ 304.426765][T13873] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 304.444361][T13873] EXT4-fs (loop8): 1 truncate cleaned up [ 304.450702][T13873] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.468439][ T28] audit: type=1400 audit(2000000093.650:12460): avc: denied { write } for pid=13872 comm="syz.8.2777" name="file3" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 304.491265][ T28] audit: type=1400 audit(2000000093.650:12461): avc: denied { remove_name } for pid=13872 comm="syz.8.2777" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.515391][ T28] audit: type=1400 audit(2000000093.650:12462): avc: denied { rename } for pid=13872 comm="syz.8.2777" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.538862][ T28] audit: type=1400 audit(2000000093.650:12463): avc: denied { rmdir } for pid=13872 comm="syz.8.2777" name="file3" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 304.561911][T13880] loop6: detected capacity change from 0 to 512 [ 304.568450][ T28] audit: type=1400 audit(2000000093.650:12464): avc: denied { rename } for pid=13872 comm="syz.8.2777" name="file3" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 304.648250][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.687857][T13880] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 304.729221][T13880] loop6: detected capacity change from 0 to 128 [ 304.742284][T13880] vfat: Unknown parameter '' [ 305.010412][T13886] Q6`Ҙ speed is unknown, defaulting to 1000 [ 305.092938][T13897] loop6: detected capacity change from 0 to 256 [ 305.131053][T13897] FAT-fs (loop6): Directory bread(block 64) failed [ 305.138263][T13897] FAT-fs (loop6): Directory bread(block 65) failed [ 305.145038][T13897] FAT-fs (loop6): Directory bread(block 66) failed [ 305.151799][T13897] FAT-fs (loop6): Directory bread(block 67) failed [ 305.158526][T13897] FAT-fs (loop6): Directory bread(block 68) failed [ 305.165410][T13897] FAT-fs (loop6): Directory bread(block 69) failed [ 305.172167][T13897] FAT-fs (loop6): Directory bread(block 70) failed [ 305.179046][T13897] FAT-fs (loop6): Directory bread(block 71) failed [ 305.186414][T13897] FAT-fs (loop6): Directory bread(block 72) failed [ 305.193273][T13897] FAT-fs (loop6): Directory bread(block 73) failed [ 305.877735][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 305.915373][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 305.944991][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 305.967466][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 305.986702][T13919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 306.007727][T13886] lo speed is unknown, defaulting to 1000 [ 306.287357][T13925] loop9: detected capacity change from 0 to 4096 [ 306.303938][T13925] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 306.723670][T13935] loop9: detected capacity change from 0 to 8192 [ 306.754146][T13935] vfat: Unknown parameter '18446744073709551615' [ 307.834666][T13956] random: crng reseeded on system resumption [ 307.974783][T13973] loop9: detected capacity change from 0 to 164 [ 307.988478][T13975] loop8: detected capacity change from 0 to 1024 [ 308.000394][T13973] iso9660: Unknown parameter 'hi' [ 308.025264][T13975] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 308.061760][T13975] JBD2: no valid journal superblock found [ 308.084935][T13975] EXT4-fs (loop8): Could not load journal inode [ 308.144564][T13975] loop8: detected capacity change from 0 to 1164 [ 308.147477][T13971] Q6`Ҙ speed is unknown, defaulting to 1000 [ 308.190357][T13971] lo speed is unknown, defaulting to 1000 [ 308.200678][T13975] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 308.389696][T13982] loop3: detected capacity change from 0 to 512 [ 308.423551][T13982] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.525369][T13982] EXT4-fs (loop3): re-mounted 00800000-0000-0000-0000-000000000000. [ 308.609906][T13986] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.636073][ T3317] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 308.636921][T13986] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.749709][ T8654] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.858967][T13997] can0: slcan on ttyS3. [ 308.891140][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 308.891156][ T28] audit: type=1400 audit(2000000098.070:12471): avc: denied { search } for pid=3042 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.990399][ T28] audit: type=1400 audit(2000000098.070:12472): avc: denied { search } for pid=3042 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.043209][ T28] audit: type=1400 audit(2000000098.070:12473): avc: denied { search } for pid=3042 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.103231][ T28] audit: type=1400 audit(2000000098.070:12474): avc: denied { read } for pid=3042 comm="dhcpcd" name="n38" dev="tmpfs" ino=14758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 309.133499][T13997] can0 (unregistered): slcan off ttyS3. [ 309.213461][ T28] audit: type=1400 audit(2000000098.070:12475): avc: denied { open } for pid=3042 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=14758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 309.313982][ T28] audit: type=1400 audit(2000000098.070:12476): avc: denied { getattr } for pid=3042 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=14758 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 309.423490][ T28] audit: type=1400 audit(2000000098.110:12477): avc: denied { mount } for pid=13995 comm="syz.3.2815" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 309.506693][ T28] audit: type=1400 audit(2000000098.120:12478): avc: denied { search } for pid=13995 comm="syz.3.2815" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.601605][ T28] audit: type=1400 audit(2000000098.120:12479): avc: denied { search } for pid=13995 comm="syz.3.2815" name="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.697911][ T28] audit: type=1400 audit(2000000098.120:12480): avc: denied { read open } for pid=13995 comm="syz.3.2815" path="/" dev="configfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.846217][T14039] __nla_validate_parse: 78 callbacks suppressed [ 309.846250][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2818'. [ 310.287843][T14046] Q6`Ҙ speed is unknown, defaulting to 1000 [ 310.334322][T14046] lo speed is unknown, defaulting to 1000 [ 310.460381][T14047] set_capacity_and_notify: 1 callbacks suppressed [ 310.460404][T14047] loop3: detected capacity change from 0 to 2048 [ 310.587562][T14056] loop6: detected capacity change from 0 to 256 [ 310.607397][T14056] FAT-fs (loop6): Directory bread(block 64) failed [ 310.614068][T14056] FAT-fs (loop6): Directory bread(block 65) failed [ 310.620877][T14056] FAT-fs (loop6): Directory bread(block 66) failed [ 310.627865][T14056] FAT-fs (loop6): Directory bread(block 67) failed [ 310.634468][T14056] FAT-fs (loop6): Directory bread(block 68) failed [ 310.641276][T14056] FAT-fs (loop6): Directory bread(block 69) failed [ 310.647940][T14056] FAT-fs (loop6): Directory bread(block 70) failed [ 310.655453][T14056] FAT-fs (loop6): Directory bread(block 71) failed [ 310.662310][T14056] FAT-fs (loop6): Directory bread(block 72) failed [ 310.669300][T14056] FAT-fs (loop6): Directory bread(block 73) failed [ 310.797376][T14047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.498894][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.814264][T14073] loop4: detected capacity change from 0 to 128 [ 312.355578][T14079] tmpfs: Bad value for 'mpol' [ 312.367267][T14079] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2827'. [ 312.840848][T10100] syz_tun (unregistering): left allmulticast mode [ 313.063952][T14092] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2829'. [ 313.157218][T14061] Q6`Ҙ speed is unknown, defaulting to 1000 [ 313.183876][T14061] lo speed is unknown, defaulting to 1000 [ 314.180890][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 314.180904][ T28] audit: type=1400 audit(2000000103.360:12492): avc: denied { setopt } for pid=14096 comm="syz.6.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 314.396092][T14061] chnl_net:caif_netlink_parms(): no params data found [ 314.621591][T14061] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.656890][T14061] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.693782][T14061] bridge_slave_0: entered allmulticast mode [ 314.726520][ T28] audit: type=1400 audit(2000000103.910:12493): avc: denied { create } for pid=14113 comm="syz.6.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 314.757934][T14061] bridge_slave_0: entered promiscuous mode [ 314.787347][T14061] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.841249][T14061] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.853550][ T28] audit: type=1400 audit(2000000103.990:12494): avc: denied { map } for pid=14113 comm="syz.6.2835" path="socket:[42402]" dev="sockfs" ino=42402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 314.899329][T14061] bridge_slave_1: entered allmulticast mode [ 314.930257][T14061] bridge_slave_1: entered promiscuous mode [ 315.007498][T14061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.019695][T14061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.040877][T14061] team0: Port device team_slave_0 added [ 315.047698][T14061] team0: Port device team_slave_1 added [ 315.100101][T14061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.125358][T14061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.164726][T14129] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2838'. [ 315.194830][T14061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.236039][T14061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.253597][T14133] loop6: detected capacity change from 0 to 512 [ 315.260470][T14061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.294382][T14061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.321132][T14133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.334609][T14133] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.364194][T14133] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.2839: corrupted xattr block 6: invalid header [ 315.395724][T14061] hsr_slave_0: entered promiscuous mode [ 315.412013][T14061] hsr_slave_1: entered promiscuous mode [ 315.412385][T14133] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 315.420674][T14061] debugfs: 'hsr0' already exists in 'hsr' [ 315.447453][T14061] Cannot create hsr debugfs directory [ 315.485599][T14139] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.2839: corrupted xattr block 6: invalid header [ 315.525678][T14139] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 315.557123][ T28] audit: type=1400 audit(2000000104.740:12495): avc: denied { mounton } for pid=14132 comm="syz.6.2839" path="/494/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.768262][T14145] loop9: detected capacity change from 0 to 8192 [ 315.795554][T14145] vfat: Unknown parameter '18446744073709551615' [ 315.880368][T14061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.943233][T14061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.996389][T14061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.035555][T14061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.106804][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.276269][T14061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.319538][ T28] audit: type=1400 audit(2000000105.500:12496): avc: denied { ioctl } for pid=14163 comm="syz.6.2848" path="socket:[41753]" dev="sockfs" ino=41753 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.324417][T14061] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.385322][ T1891] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.392506][ T1891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.443981][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.451089][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.461071][T14167] loop6: detected capacity change from 0 to 1024 [ 316.527236][T14167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.533366][T14061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.579866][T14061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.669432][T14167] program syz.6.2849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.701010][T14186] syz_tun: entered promiscuous mode [ 316.710377][T14188] loop4: detected capacity change from 0 to 128 [ 316.719484][T14186] vlan0: entered promiscuous mode [ 316.730556][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.762974][T14188] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 316.765054][T14061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.808910][T14188] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 316.903862][T14188] Invalid argument reading file caps for ./file0 [ 316.949206][T13593] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.965452][T14061] veth0_vlan: entered promiscuous mode [ 316.975022][T14061] veth1_vlan: entered promiscuous mode [ 317.024591][T14061] veth0_macvtap: entered promiscuous mode [ 317.056908][T14061] veth1_macvtap: entered promiscuous mode [ 317.109176][T14061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.124599][T14209] loop8: detected capacity change from 0 to 128 [ 317.151046][T14061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.170031][T14209] FAT-fs (loop8): Directory bread(block 414) failed [ 317.203487][T14209] FAT-fs (loop8): Directory bread(block 415) failed [ 317.211545][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.233460][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.242672][T14209] FAT-fs (loop8): Directory bread(block 416) failed [ 317.272991][T14209] FAT-fs (loop8): Directory bread(block 417) failed [ 317.279942][T14209] FAT-fs (loop8): Directory bread(block 418) failed [ 317.292681][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.302843][T14209] FAT-fs (loop8): Directory bread(block 419) failed [ 317.309901][T14209] FAT-fs (loop8): Directory bread(block 420) failed [ 317.317175][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.317965][T14209] FAT-fs (loop8): Directory bread(block 421) failed [ 317.384346][T14193] Q6`Ҙ speed is unknown, defaulting to 1000 [ 317.391754][T14193] lo speed is unknown, defaulting to 1000 [ 317.417567][T14209] FAT-fs (loop8): Directory bread(block 414) failed [ 317.429382][T14209] FAT-fs (loop8): Directory bread(block 415) failed [ 317.589940][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2864'. [ 317.620103][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 317.639345][T14222] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.646829][T14222] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.673619][ T35] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 317.695773][T14224] loop8: detected capacity change from 0 to 4096 [ 317.730182][T14224] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 317.790470][T14226] fido_id[14226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 317.834602][T14232] loop3: detected capacity change from 0 to 128 [ 317.891892][T14232] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.946655][T14232] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.983979][T14232] Invalid argument reading file caps for ./file0 [ 318.006241][T14061] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.169876][T14282] netlink: 'syz.3.2871': attribute type 4 has an invalid length. [ 318.211675][T14282] netlink: 'syz.3.2871': attribute type 4 has an invalid length. [ 318.982737][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2879'. [ 319.213449][ T28] audit: type=1400 audit(2000000108.390:12497): avc: denied { accept } for pid=14302 comm="syz.3.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.327307][ T28] audit: type=1400 audit(2000000108.510:12498): avc: denied { mount } for pid=14308 comm="syz.6.2881" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 319.423469][ T28] audit: type=1400 audit(2000000108.510:12499): avc: denied { mount } for pid=14308 comm="syz.6.2881" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 323.405875][ T28] audit: type=1400 audit(2000000112.590:12500): avc: denied { bind } for pid=14339 comm="syz.6.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 323.526179][ T28] audit: type=1400 audit(2000000112.590:12501): avc: denied { name_bind } for pid=14339 comm="syz.6.2891" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 323.580640][T14334] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2888'. [ 323.616991][ T28] audit: type=1400 audit(2000000112.590:12502): avc: denied { node_bind } for pid=14339 comm="syz.6.2891" saddr=::ffff:172.30.1.7 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 323.787616][T14356] 9p: Bad value for 'rfdno' [ 323.799572][T14334] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=14334 comm=syz.8.2888 [ 323.895989][T14345] loop8: detected capacity change from 0 to 2048 [ 323.943436][ T28] audit: type=1400 audit(2000000113.120:12503): avc: denied { audit_read } for pid=14359 comm="syz.3.2898" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 324.060409][T14345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.124062][ T8654] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.153600][T14378] loop9: detected capacity change from 0 to 8192 [ 325.198054][T14378] vfat: Unknown parameter '18446744073709551615' [ 325.266899][ T28] audit: type=1400 audit(2000000114.360:12504): avc: denied { setopt } for pid=14381 comm="syz.3.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.386232][ T28] audit: type=1400 audit(2000000114.360:12505): avc: denied { bind } for pid=14381 comm="syz.3.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 326.257973][ T28] audit: type=1400 audit(2000000115.430:12506): avc: denied { create } for pid=14385 comm="syz.6.2906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 327.170558][ T28] audit: type=1400 audit(2000000116.350:12507): avc: denied { lock } for pid=14400 comm="syz.3.2910" path="socket:[44040]" dev="sockfs" ino=44040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 328.000786][ T28] audit: type=1400 audit(2000000117.180:12508): avc: denied { cmd } for pid=14415 comm="syz.9.2916" path="socket:[43075]" dev="sockfs" ino=43075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 328.364726][T14426] loop3: detected capacity change from 0 to 8192 [ 328.380105][T14426] vfat: Unknown parameter '18446744073709551615' [ 328.487653][T14426] ================================================================== [ 328.495897][T14426] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 328.503307][T14426] [ 328.505655][T14426] read-write to 0xffffc90001f7fe28 of 8 bytes by task 14425 on cpu 1: [ 328.514142][T14426] shmem_writeout+0x2f1/0x920 [ 328.518923][T14426] shrink_folio_list+0x1f1f/0x2820 [ 328.524132][T14426] evict_folios+0x2a60/0x35c0 [ 328.529039][T14426] try_to_shrink_lruvec+0x81b/0xbf0 [ 328.534337][T14426] shrink_lruvec+0x255/0x1c60 [ 328.539376][T14426] shrink_node+0x67a/0x2130 [ 328.544035][T14426] do_try_to_free_pages+0x408/0xc80 [ 328.549375][T14426] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 328.555652][T14426] try_charge_memcg+0x37e/0xa10 [ 328.560515][T14426] obj_cgroup_charge_pages+0x23/0xc0 [ 328.565811][T14426] __memcg_kmem_charge_page+0x9e/0x170 [ 328.571296][T14426] __alloc_frozen_pages_noprof+0x18a/0x360 [ 328.577117][T14426] alloc_pages_mpol+0xb3/0x260 [ 328.581905][T14426] alloc_pages_noprof+0x8f/0x130 [ 328.587121][T14426] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 328.593024][T14426] __kvmalloc_node_noprof+0x3d4/0x650 [ 328.598404][T14426] ip_set_alloc+0x24/0x30 [ 328.603178][T14426] hash_netiface_create+0x282/0x740 [ 328.608469][T14426] ip_set_create+0x3cf/0x970 [ 328.613065][T14426] nfnetlink_rcv_msg+0x509/0x5d0 [ 328.618095][T14426] netlink_rcv_skb+0x123/0x220 [ 328.622957][T14426] nfnetlink_rcv+0x167/0x1720 [ 328.627637][T14426] netlink_unicast+0x5c0/0x690 [ 328.632408][T14426] netlink_sendmsg+0x5c8/0x6f0 [ 328.637443][T14426] ____sys_sendmsg+0x563/0x5b0 [ 328.646766][T14426] ___sys_sendmsg+0x195/0x1e0 [ 328.651647][T14426] __x64_sys_sendmsg+0xd4/0x160 [ 328.656691][T14426] x64_sys_call+0x194c/0x3020 [ 328.661472][T14426] do_syscall_64+0x12c/0x370 [ 328.666065][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.671962][T14426] [ 328.674288][T14426] read to 0xffffc90001f7fe28 of 8 bytes by task 14426 on cpu 0: [ 328.682008][T14426] shmem_fallocate+0x5c0/0x920 [ 328.687040][T14426] vfs_fallocate+0x3b6/0x450 [ 328.691661][T14426] __x64_sys_fallocate+0x7a/0xd0 [ 328.697039][T14426] x64_sys_call+0x298e/0x3020 [ 328.701917][T14426] do_syscall_64+0x12c/0x370 [ 328.706520][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.712772][T14426] [ 328.715095][T14426] value changed: 0x0000000000000150 -> 0x000000000000015f [ 328.722460][T14426] [ 328.724798][T14426] Reported by Kernel Concurrency Sanitizer on: [ 328.731248][T14426] CPU: 0 UID: 0 PID: 14426 Comm: syz.3.2919 Not tainted syzkaller #0 PREEMPT(full) [ 328.740651][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.750895][T14426] ==================================================================