last executing test programs: 5m32.513296177s ago: executing program 3 (id=23): lstat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000980)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_lower}, {@uni_xlate}, {@fat=@tz_utc}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@discard}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@shortname_lower}], [{@smackfsdef={'smackfsdef', 0x3d, 'utf8=0'}}, {@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@euid_gt}, {@uid_lt={'uid<', r0}}, {@hash}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) (async) r2 = syz_io_uring_setup(0x11cd, &(0x7f00000003c0)={0x0, 0xde73, 0x80, 0x1103, 0x2c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) tkill(0x0, 0x2f) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r6, 0x402, 0x80000023) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r7, 0x402, 0x40000008) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x21) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x14, r9, 0x62c21a4ade68aba1, 0x70bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x24008000) 5m31.80661812s ago: executing program 3 (id=28): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x9, 0x30000000002}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x81010000000000, 0x2) 5m31.010249983s ago: executing program 3 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000003c0), 0x3, 0x566, &(0x7f00000015c0)="$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") setxattr$security_capability(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x40000000809ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000240)={r8, @in={{0x2, 0x4e22, @local}}, [0x0, 0x8, 0x6, 0x7ff7, 0xfffffffffffffff8, 0x8, 0x6, 0x9, 0x2, 0x3, 0x5, 0x2, 0x47bd, 0x3b7, 0x5]}, &(0x7f00000001c0)=0x100) prlimit64(0x0, 0x2, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) 5m29.291475931s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) (async) r0 = getuid() quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000280)) 5m29.146327908s ago: executing program 3 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m27.777197765s ago: executing program 3 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 5m27.776718494s ago: executing program 32 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1m52.551187468s ago: executing program 4 (id=1513): socket$xdp(0x2c, 0x3, 0x0) socket(0x1e, 0x805, 0x1000000) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='J'], 0x80002) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) splice(r1, 0x0, r2, 0x0, 0x1fffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYBLOB="0000000003120100500012800b0001006272696467650000400002"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$xdp(0x2c, 0x3, 0x0) 1m52.424781229s ago: executing program 4 (id=1515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000010000000000000000000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)="37cb0d24d3b0fb", &(0x7f00000001c0), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x40f, 0x1) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x65]}}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) time(&(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 1m52.403917714s ago: executing program 4 (id=1517): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000000000), 0xfffffffffffffffd, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) 1m52.183022024s ago: executing program 4 (id=1518): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1m51.67425463s ago: executing program 4 (id=1519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a879e7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x800) 1m51.488949038s ago: executing program 4 (id=1524): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240), 0xfff3}}, 0x40) 1m51.488742858s ago: executing program 33 (id=1524): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240), 0xfff3}}, 0x40) 1m20.902952871s ago: executing program 0 (id=1824): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x2, 0xa, 0x10000, 0x0, 0x0, 0x1) syz_emit_ethernet(0xf8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c20000000000000000000800450000ea006400000011907800000000e000000100044e2200d6"], 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x40000000}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000003000000000200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000004000000632af8ff00000000b509000000000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r12, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) write$cgroup_pid(r3, &(0x7f0000000940), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x0, 0x2, 0x2, 0xa, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0x8b}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0xd6b, 0x80, &(0x7f0000000080)=""/128, 0x41100, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x2}, 0x10, r13, r12, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r11}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m19.8783346s ago: executing program 0 (id=1834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3505}]}, 0x78}, 0x1, 0x7, 0x2000000}, 0x0) 1m19.751981612s ago: executing program 0 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0x106, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (fail_nth: 10) 1m19.630205704s ago: executing program 0 (id=1837): timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0x1, 0x26a, &(0x7f0000000b40)="$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") (async) r1 = syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0x1, 0x26a, &(0x7f0000000b40)="$eJzs3T9oJFUcB/DfzO6af4tEbQTxD4iIBkLsBJvYKAQkBBFBhYiIjZIIMcEusbKx0FJUUtkEsTNaSppgowhiETVFbA7uwhUXrrg7bo/d2UD+3uaym5lj5/OBze6befN+b0i+b0LIMAGU1mhETEZEJSLGIqIWEcnBDk9lr9F2c3Voczai0Xj9atLql7Uz+8eNRMRKRLwYERtpEh9WI5bW3965vvXqs18s1p75fv2toVxPsm13Z/u1ve+mP/9p6oWlP/66PJ3EZNQPnVfvJSdsqyYRD19EsftEUi16BpzFzKc//tPM/SMR8XQr/7VII/vmfbnwwEYtnv/2tGO/uvLnY3nOFei9RqPWvAauNDoYbPUF+kkaEfVI0vGIyD6n6fh49jv8v5Xh9KP5hU/GPphfnHu/6JUK6JV6xPYrvwz8PHIk/5cqWf5bDaD/ZH+U2n5jZu2/5oe9StETAnLxePbWvP6Pvbv8XHTMfy2feQG5OXv+gX4j/1Be8g/lJf9QXvIPfe/v03bIP5TE7fY/+x3YJP9QXvIP5XXu/H996+ImBeTiYP4BgHJpDJzrruHe3oQMFKLo9QcAAAAAAAAAAAAAAAAAADhudWhzdv/VmxGrHXv89k3E7stZ1+P1K+1HEA+2vg5fSw6NmJypwt2982SXA3Tph4Lvvn7w/2Lr//5EsfWX5yJWPouIiWr1+M9f0vUjsB/qsL/2XpcF7lFypP3Sm/nWP+rmWrH1p7Yifm2uPxMnrT9pPNp6P3n9qffgyagf3+hyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHJzJwAA//+WkXK4") ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)) r2 = signalfd(r1, &(0x7f00000001c0)={[0xa10f]}, 0x8) bind$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0x1, @loopback}}, 0x1e) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r3, &(0x7f0000000600)=""/4099, 0xfdef, 0x110) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x208402) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x83, 0x5f9, &(0x7f0000001200)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050}}, {{&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0xc2, 0x14, 0x1, 0xc, @empty, @empty, 0xc93f885142aa04a, 0xff10, 0x0, 0x7}}) ioctl$SG_BLKTRACESTOP(r4, 0x1275, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000a00)={{}, {0x77359400}}, &(0x7f0000000a40)) 1m19.017589596s ago: executing program 0 (id=1839): r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r0) getsockopt$nfc_llcp(r1, 0x118, 0x3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m18.775716822s ago: executing program 0 (id=1842): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, 0x0, 0x60000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0x2, 0x400, 0xa, 0x2, 0x4, 0x0, 0x8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r8, 0x0, 0xfffe}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x101, 0xa0080) syz_open_dev$vcsa(&(0x7f0000000080), 0xfff, 0x40000) 1m18.72285305s ago: executing program 34 (id=1842): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, 0x0, 0x60000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0x2, 0x400, 0xa, 0x2, 0x4, 0x0, 0x8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r8, 0x0, 0xfffe}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x101, 0xa0080) syz_open_dev$vcsa(&(0x7f0000000080), 0xfff, 0x40000) 3.776087862s ago: executing program 5 (id=2485): r0 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0x10, 0x70bd26, 0x0, {0x2, 0x0, 0x0, r1, {0xd, 0xc}, {0x0, 0x4}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x7, 0x2, 0x4, 0xa}}, {0x4}}]}]}, 0x68}}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x2, 0x0, 0x6a}) 3.733789552s ago: executing program 5 (id=2486): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x5, 0x10, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0]}) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001c00), 0x12) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) setfsuid(0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r3, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe7}]}, 0x10) ptrace(0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001c40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="aa345d3b1232ac2882c30296304464eae66fe8a5c104a0f1bf8ba06eb0a2ef4343a60d9e284eadb2bfdc9190e341b1668e57bcd4e42d11de4c83d952ce703955990c40c6106c8d3d0f9ebb26e5dbfd19a2e76e06000a383d63dad66461d73c3ba0277cd9323f81a74452c96c97d9624e9d3c7b7b267c467d9d756710a0458fdc1aa1defd34bb96ad621aa2713d9cabcb15855b05854fb5d8f199128e76b62c47ec18", @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESOCT, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) 3.06181321s ago: executing program 2 (id=2492): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300c046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x55d, &(0x7f0000000b40)="$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") socket(0x2, 0x80805, 0x0) socketpair(0x1d, 0xa, 0xffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x1104, 0x0, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000000) unshare(0x2040400) r3 = semget$private(0x0, 0x7, 0x191) semop(r3, 0x0, 0x0) unshare(0x40400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=G']) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES32=r5, @ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$vga_arbiter(r0, &(0x7f0000000340)=ANY=[], 0x50) r8 = epoll_create(0xb398) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000500000007000000ffffff7f00040000", @ANYRES32=r5, @ANYBLOB="0600"/20, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="050000000000000001f95000070000000000000000000000000000000d81b74d5da9d1badd6e3e166ffa4c58820dc7597f22bd54287caaec6f084f5dd8d7c89df23b0e4948bf94"], 0x50) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000140)) 2.753301861s ago: executing program 7 (id=2493): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a879e7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x800) 2.653941118s ago: executing program 2 (id=2494): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0xb0b, 0x1}, 0x1004, 0x0, 0x10000, 0x3, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1412, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0c1}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0xfc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4269, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xe}, 0x19196, 0x20000, 0x43a1bd76, 0x1, 0x2c9, 0x2, 0x4, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) fgetxattr(r5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x2, &(0x7f0000001680)=[{0x61, 0x0, 0x0, 0x8}, {0x6}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 2.607531558s ago: executing program 7 (id=2495): unshare(0x6a040000) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x20040600) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r0, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{0x1}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x1, 0xff, 0x2, 0x8, 0x6b, 0x0, 0x3, 0xa3, 0x4, [0x2, 0xfffffffe, 0x86, 0x66, 0x5, 0x40800, 0x4, 0x8]}}) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb, 0x40000000000000}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x78f5}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000001240)={0x2, 0x0, 0x98, &(0x7f0000001180)={0x7, 0x7f, 0x7}}) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) rt_sigprocmask(0x2, &(0x7f00000015c0)={[0xf19]}, &(0x7f0000001580), 0x8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d00000000fddbdf25020010000004000100e1ff1f08081e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 2.401468472s ago: executing program 7 (id=2496): r0 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0x10, 0x70bd26, 0x0, {0x2, 0x0, 0x0, r1, {0xd, 0xc}, {0x0, 0x4}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x7, 0x2, 0x4, 0xa}}, {0x4}}]}]}, 0x68}}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x2, 0x0, 0x6a}) 2.297499668s ago: executing program 5 (id=2497): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x0, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) unshare(0x24020400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001700)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000500)="565d747b1020a93bd3652151761690484055ae25e4cb701a9ca0f653cc89088cf7f9292e5f06bcfc4536d99226d468c63000f575b00eee3420cfa0f363380030cae01d642d1160965b8fb2b7dd16aaef577fea859b8a78894231717300165cf83a0a0787b01ae80912ce21164366312c026bf0a9dab5f7f6982e9cc40d2275902aae9bafd571b308e243762d33df4362022485231c86ac52ba29bae79031308eb2fdf862fcebb385334fb8d9901d23853dfcf0b4762bb09def93b6cb78", 0xbd}, {&(0x7f0000000680)="4cd96666533d82215194a83235ae197806102f9df194f117a998682aa32aa4a8892a510a8c7299639e8d18af0c04e929db68b5cc458885d5327e0841edd551765f5635a919caffeda0843bbd6440cf9de3514d544400069bc8b33c8ffc7a208b8c2909a7f4eff05bea44d4a05b2ba31b8e089cd2c069d3d59806960e688dd5365bd8010bafaf51eabf1900e19ef4c16bebb16a25a0eadbd7de9f549e935d1c34081a70c7069557233585ee3a6ead380f20abefce6a23c64ad7aea226f4d8c9ec58fbf10fa33747bf936f664e", 0xcc}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000000780)="0cc1339526b32f995afcb77e559f4ad91b41778b6b5946b0abd3f3108b81e13640f93e6d485f0f06779ef7a704a7c9e83e5a26f4e490ab4ca9c0a516806be5880170afb93303b6011b3e90ca28402d21a1e815f1eb5484da4e62c48f8bcf4dd1e57418af1d6dbb811c9db9fcf68ddbf0837a3a40a9606f97953e079f6a6a6e358e9561f5af94424bd073dd75aa8483a6f0c12ab6adc1613d96207fb320a4f47a5eb153a7ccb8e35ad32b877dd04687126384ae939b4a78206e75a57ff9b0be845b2d2a7105b0a62e52b70ae9873fbba27c43f08378e82d5440f38a40204533bfabaec27fd321e48efccf16c2c60079539a503a0c754d3f860fe15836a101", 0xfe}, {&(0x7f00000001c0)="3994661036c48276de737e98414274e40aa4c0942ab0989a3fe4beef8112348b1dac993b3f9c794b92b6c7c3bd77fc774009b5b0d37b1ccc381482109e2e35e3", 0x40}, {&(0x7f0000000880)="fcdddfe4e26135387c56c9b742c7f7a777c9ef706314234d674333ed25a5f7c9cb7f6e6af07b2c23e5fd730fade9c3ccdfa502cc1265bbbb592159d4cac2dfe6b58815692983906bbfdd2a2d7c2ec414d689693982d1857e17b3edfd221f20f76987da6bac44a18ff519fbf8a09e72daf001a3a8db7ec99b31745176dc650b2605d982560f50a75c9e480d4e69cccd3170088daf7c091821d23ea6bd4fafcfa87a2adbd1501a01ad3e1b8a98b720e7214e083e8394d80ea0f45930fac5aeef0da302b61c65fbcf24a51151b41ff600", 0xcf}, {&(0x7f0000000980)="ce67a6a7034a200c6d8cc0efb5f4000afe0b4c2c20652552b786ab6465a3e0947d6c19684844c4df4fd55f04aae3af901ea4a219ad7dbdd66b724296f3b59748125cde36cd2a959854d678765c1d5ba7634a6c1a9279edb11c4e2e9d316223122f1a3ee38cb8a5c633b309eb560c2befac796b090dbf62220a972ef1b6c47761d5be29cf9a10d7a5652c9d2be7f8178d8a8477129baebe44d48ee637100b4ced6228cd71d32d5f43ebe16db84d8f48ab82c045957abf290c64d4f016a6b5877471179416f011c70d7e9be3cbc17cc5b2545e22597fc3a656e5977f79667d69dc6771f1cfcd", 0xe5}], 0x7, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d00)="d0b0732ddc2d5f3efed66c41aa581163356ee338c5c522793c2f2a0e453d33ea259a111f31ef172e85fb504e7f55aaababd6fc04ec5ccb883b51b5666bd80d39e01d37f1480c3ffe8a51d982fa00e6a76bdb376da2c08b7aadf4ab50751cc2abf413a107dfa70c78b27f8c1d5d9157ed57adc0b3a15646b71f5f071767a05ca8f395d35fc107fded989b6003f1f131fa34dd01db8aba5753a4fa94b82ad25398ca31842d354a7895250050d3e182e12e96d0fc5b3d9cde9a9b2582afeef13bfac9a8df98052febd62fa8d79676935407b69f71cf05434714b5935fc33c4e2c3587bce5b9b57dda3e8f", 0xe9}], 0x1, &(0x7f0000000c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x48, 0x4000}}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r3, r0, 0xffffffffffffffff]}}], 0x130, 0x4810}}, {{&(0x7f0000001340)=@abs={0x2226e5b5f240b4c4, 0x0, 0x4e20}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001280)="d13d652debceb531d945fcd733a2ad04ba59db8ba483bc1542d78af80b49e8bc84b73f9f13a721ddb56587144d89bea64101e12c7211085aff0042164d77", 0x3e}, {&(0x7f00000013c0)="23ce330f76c6607dff0bdcf02290bba7306c38a2e5e62643dea969e87ed8368647aa4ccaa680d29c265ff5ca6dc9d84310f1545c135f897e4cf6f0ad1b7540d5d7113cb2fab6bb6fd066fd334185e2d0e63d6a1176bee5a12ca383bc6483ac2c223b4f67f9ab38c89cd88a99367dd33744e370f7da44ac0566f469d7f4d6a96365780cdaab48065be3c452c14767e170e3719270931de9de5311e59c7296fd866d25b4a9c8fb", 0xa6}], 0x2, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8, 0x24000811}}], 0x4, 0x40004) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x9) connect$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f00000003c0), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 1.15404675s ago: executing program 5 (id=2506): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x0, 0x8002}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="5fc1f5f8827b", 0x6}, {0x0}], 0x2}, 0x8c90) 1.15384337s ago: executing program 2 (id=2508): r0 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0x10, 0x70bd26, 0x0, {0x2, 0x0, 0x0, r1, {0xd, 0xc}, {0x0, 0x4}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x7, 0x2, 0x4, 0xa}}, {0x4}}]}]}, 0x68}}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x2, 0x0, 0x6a}) 1.15354767s ago: executing program 2 (id=2509): unshare(0x6a040000) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x20040600) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r0, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{0x1}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x1, 0xff, 0x2, 0x8, 0x6b, 0x0, 0x3, 0xa3, 0x4, [0x2, 0xfffffffe, 0x86, 0x66, 0x5, 0x40800, 0x4, 0x8]}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb, 0x40000000000000}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x78f5}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000001240)={0x2, 0x0, 0x98, &(0x7f0000001180)={0x7, 0x7f, 0x7}}) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) rt_sigprocmask(0x2, &(0x7f00000015c0)={[0xf19]}, &(0x7f0000001580), 0x8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d00000000fddbdf25020010000004000100e1ff1f08081e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 1.123003413s ago: executing program 7 (id=2510): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, 0x0, 0x60000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x1, 0x2, 0x400, 0xa, 0x2, 0x4, 0x0, 0x8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x101, 0xa0080) syz_open_dev$vcsa(&(0x7f0000000080), 0xfff, 0x40000) 1.11019955s ago: executing program 5 (id=2511): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0xb0b, 0x1}, 0x1004, 0x0, 0x10000, 0x3, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1412, 0x2, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0c1}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0xfc}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) fgetxattr(r6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x2, &(0x7f0000001680)=[{0x61, 0x0, 0x0, 0x8}, {0x6}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 769.297073ms ago: executing program 6 (id=2512): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040094}, 0x20040000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1bc, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa17e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4e81}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe881}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @empty, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0xffff, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private1, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044}, 0x24000041) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfc, {0x80, 0x14, 0x10, 0xff, 0xfe, 0x2, 0xc8, 0x5, 0x500}, [@RTA_UID={0x8, 0x19, 0xee00}, @RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x44044) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x800, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xcc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c10}, 0x80) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb4, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x98, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "54c7546b9025f509d0c636d6bc01143ff4520326cac73322077f374f85f269c9"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ee446b0e16392559c77a2d62eb4e60f3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0ac7ee83facb29d14692127bbb5acf1845d91d1e41c5355e52b3f6980f09dac4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c20538e5050f354ad1acf478ddfb5ba802c304d37273db845284baeb5b292d02"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "266e9a2c00cff42aece7a7d827c80962"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4020880}, 0x4c001) r6 = dup(r0) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x1401, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r7, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0xe}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r6) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r9, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x104, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x56d9}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd85}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}]}, 0x104}, 0x1, 0x0, 0x0, 0x4004090}, 0x8044) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000f00)={'pimreg\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000f40)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001000)={'syztnl1\x00', &(0x7f0000000f80)={'ip6tnl0\x00', r11, 0x0, 0x8, 0x3, 0x9, 0x8, @empty, @local, 0x0, 0x1, 0x0, 0x6}}) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x80, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040005}, 0x4044000) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001300)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xa, 0x13, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe100, 0x0, 0x0, 0x0, 0x60b}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa1}, @alu={0x0, 0x1, 0x0, 0x5, 0x4, 0x18, 0xfffffffffffffff0}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @generic={0x8, 0xc, 0x7, 0x1, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @exit, @jmp={0x5, 0x1, 0x8, 0x6, 0x1, 0xfffffffffffffff4, 0xfffffffffffffffc}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000001240)='syzkaller\x00', 0xcd1, 0x20, &(0x7f0000001280)=""/32, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2e, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0x10, 0x3}, 0x10, 0x0, r12, 0x1, &(0x7f0000001340)=[0xffffffffffffffff, r0], &(0x7f0000001380)=[{0x2, 0x4, 0xc, 0x5}], 0x10, 0x80}, 0x94) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x180, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdbd9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4c8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x87b1}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @loopback, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffe000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x56}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x14d}]}]}, 0x180}}, 0x4c014) msgget$private(0x0, 0x180) 762.419162ms ago: executing program 2 (id=2513): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x0, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) unshare(0x24020400) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x572c6de, 0x4, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0xe0ff, 0x0, 0x20, 0x0, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0xfffffffe, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x20000, 0x3, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x2, 0x4ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xa847, 0xffffffff, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0xfffffffc, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 358.100991ms ago: executing program 1 (id=2515): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000180)='./file7/file0\x00', 0x1b4247c, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x66, 0x8a, 0x0, 0x0, 0x4, 0x510, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x10000, 0x0, 0x5, 0xc, 0x220005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000240)=""/157, 0x9d) 170.362949ms ago: executing program 1 (id=2516): r0 = socket(0x18, 0xa, 0x80400d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) 170.207058ms ago: executing program 1 (id=2517): socket$phonet(0x23, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) 170.086608ms ago: executing program 6 (id=2518): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000001c0)=ANY=[], 0x138) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r1, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x7a, @empty, 0x3}, 0x80, 0x0}, 0x404c040) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x140f, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x810) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}], 0x18, 0x4000000}, 0x8010) 122.221187ms ago: executing program 6 (id=2519): r0 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x68, 0x14, 0x10, 0x70bd26, 0x0, {0x2, 0x0, 0x0, r1, {0xd, 0xc}, {0x0, 0x4}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xc, 0x1, 0x0, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x7, 0x2, 0x4, 0xa}}, {0x4}}]}]}, 0x68}}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) madvise(&(0x7f0000130000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0x0, 0xc2ff, 0x0, 0x2, 0x0, 0x6a}) 72.951307ms ago: executing program 6 (id=2520): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='-8'], 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB=']\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f000001b980), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f000001ba40)={&(0x7f0000019440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000001ba00)={&(0x7f000001b9c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0bb42bbd7000fedbbc250c00000008003400070000000800bb8a93d7bdbbbbbbbbbb000008003b0004000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r10, r8, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f000001b780)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x0, 0x0, 0x4007}}) r11 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) sendmsg$rds(r0, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f00000190c0)=""/160, 0xa0}, {&(0x7f0000019180)=""/46, 0x2e}, {&(0x7f00000191c0)=""/19, 0x13}, {&(0x7f0000019200)=""/249, 0xf9}, {&(0x7f0000019300)=""/182, 0xb6}, {&(0x7f00000193c0)=""/103, 0x67}, {&(0x7f0000019440)}, {&(0x7f0000019480)=""/252, 0xfc}, {&(0x7f0000019580)=""/188, 0xbc}, {&(0x7f0000019640)=""/90, 0x5a}], 0xa, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001a780)=""/4096, 0x1000}, {&(0x7f000001bd80)=""/148, 0x94}, {&(0x7f000001b840)=""/102, 0x66}], 0x3, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, &(0x7f000001b900)=0xcf61, &(0x7f000001b940), 0x1, 0x6, 0x9, 0x200, 0x14, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f000001bac0), &(0x7f000001bb00)=0x1, 0x0, 0x3, 0x598, 0x7, 0x20}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x8}, &(0x7f000001bb40)=0x8000, &(0x7f000001bb80)=0x2, 0x1000, 0x3, 0xfffffffffbffff65, 0x6, 0x3, 0x3}}], 0x180, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r11, 0x8004f50c, &(0x7f0000019080)) 29.819206ms ago: executing program 1 (id=2521): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7, @remote, 0x0, 0x8002}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="5fc1f5f882", 0x5}, {0x0}], 0x2}, 0x8c90) 0s ago: executing program 1 (id=2522): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = fsopen(0x0, 0x0) r3 = fsmount(r2, 0x0, 0x82) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000003c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r4, 0x321, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004002e00090003002e372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) kernel console output (not intermixed with test programs): tlink: 16 bytes leftover after parsing attributes in process `syz.0.1744'. [ 275.041411][ T9670] syzkaller0: entered promiscuous mode [ 275.055109][ T9670] syzkaller0: entered allmulticast mode [ 275.179945][ T9673] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1749'. [ 275.276501][ T9676] syz_tun: entered allmulticast mode [ 275.283550][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1751'. [ 275.297570][ T9676] syz_tun (unregistering): left allmulticast mode [ 275.574458][ T9696] syzkaller0: entered promiscuous mode [ 275.590063][ T9696] syzkaller0: entered allmulticast mode [ 275.601163][ T9702] netlink: 'syz.5.1762': attribute type 1 has an invalid length. [ 275.637641][ T9702] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 275.648417][ T9702] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 275.689367][ T9707] bond5: (slave gretap1): making interface the new active one [ 275.705846][ T9707] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 275.718529][ T9707] macvlan2: entered promiscuous mode [ 275.750507][ T9707] macvlan2: entered allmulticast mode [ 275.756279][ T9707] bond5: entered promiscuous mode [ 275.761429][ T9707] gretap1: entered promiscuous mode [ 275.766946][ T9707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.776831][ T9707] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 275.788629][ T9707] bond5: left promiscuous mode [ 275.793555][ T9707] gretap1: left promiscuous mode [ 275.872369][ T9713] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1765'. [ 275.942461][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1765'. [ 276.204062][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1766'. [ 276.355908][ T9725] loop0: detected capacity change from 0 to 128 [ 276.720663][ T9739] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1768'. [ 277.419020][ T9744] loop2: detected capacity change from 0 to 512 [ 277.428271][ T9744] EXT4-fs: Ignoring removed orlov option [ 277.451489][ T9744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.464199][ T9744] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.477609][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 277.477636][ T28] audit: type=1400 audit(1772418191.314:6453): avc: denied { rename } for pid=9743 comm="syz.2.1771" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.518764][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.605105][ T9753] syzkaller0: entered promiscuous mode [ 277.610819][ T9753] syzkaller0: entered allmulticast mode [ 277.692848][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'. [ 277.719219][ T9758] team0: Port device team_slave_1 removed [ 278.079078][ T9768] FAULT_INJECTION: forcing a failure. [ 278.079078][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 278.130832][ T9768] CPU: 1 UID: 0 PID: 9768 Comm: syz.0.1779 Not tainted syzkaller #0 PREEMPT(full) [ 278.130857][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.130870][ T9768] Call Trace: [ 278.130876][ T9768] [ 278.130883][ T9768] __dump_stack+0x1d/0x30 [ 278.130977][ T9768] dump_stack_lvl+0x95/0xd0 [ 278.131000][ T9768] dump_stack+0x15/0x1b [ 278.131019][ T9768] should_fail_ex+0x263/0x280 [ 278.131084][ T9768] should_failslab+0x8c/0xb0 [ 278.131183][ T9768] kmem_cache_alloc_noprof+0x66/0x400 [ 278.131211][ T9768] ? __anon_vma_prepare+0xcd/0x2f0 [ 278.131238][ T9768] __anon_vma_prepare+0xcd/0x2f0 [ 278.131264][ T9768] do_wp_page+0x196b/0x2590 [ 278.131292][ T9768] ? css_rstat_updated+0xbb/0x280 [ 278.131319][ T9768] ? __rcu_read_lock+0x36/0x50 [ 278.131339][ T9768] handle_mm_fault+0x8c7/0x3020 [ 278.131365][ T9768] ? vma_start_read+0x1c7/0x2c0 [ 278.131393][ T9768] do_user_addr_fault+0x62f/0x1050 [ 278.131488][ T9768] ? ksys_mmap_pgoff+0xc1/0x310 [ 278.131508][ T9768] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 278.131596][ T9768] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 278.131620][ T9768] ? trace_page_fault_user+0x1f/0xe0 [ 278.131648][ T9768] exc_page_fault+0x62/0xa0 [ 278.131672][ T9768] asm_exc_page_fault+0x26/0x30 [ 278.131724][ T9768] RIP: 0033:0x7f92f4063a63 [ 278.131740][ T9768] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 278.131757][ T9768] RSP: 002b:00007f92f2c06470 EFLAGS: 00010202 [ 278.131774][ T9768] RAX: 0000000000000400 RBX: 00007f92f2c06530 RCX: 00007f92ea7e7000 [ 278.131789][ T9768] RDX: 00007f92f2c066d0 RSI: 0000000000000001 RDI: 00007f92f2c065d0 [ 278.131859][ T9768] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a7 [ 278.131870][ T9768] R10: 00000000000000be R11: 00007f92f2c06530 R12: 0000000000000001 [ 278.131883][ T9768] R13: 00007f92f4262320 R14: 0000000000000020 R15: 00007f92f2c065d0 [ 278.131964][ T9768] [ 278.131977][ T9768] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 278.342593][ T9768] loop0: detected capacity change from 0 to 1024 [ 278.350705][ T9768] EXT4-fs: inline encryption not supported [ 278.360343][ T9768] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.377308][ T9768] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.1779: lblock 2 mapped to illegal pblock 2 (length 1) [ 278.423904][ T9768] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 278.424083][ T9768] EXT4-fs (loop0): Remounting filesystem read-only [ 278.433293][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 278.433316][ C1] EXT4-fs (loop0): initial error at time 1772418192: ext4_map_blocks:776: inode 3: block 2 [ 278.433349][ C1] EXT4-fs (loop0): last error at time 1772418192: ext4_map_blocks:776: inode 3: block 2 [ 278.468073][ T9768] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 278.495301][ T9768] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 278.504435][ T9768] EXT4-fs (loop0): 1 orphan inode deleted [ 278.517966][ T9768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.531464][ T9768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.845751][ T3585] kernel read not supported for file /mdstat (pid: 3585 comm: kworker/0:5) [ 278.872808][ T28] audit: type=1326 audit(1772418192.697:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f7e4c799 code=0x7ffc0000 [ 278.910154][ T28] audit: type=1326 audit(1772418192.697:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f43f7e4c799 code=0x7ffc0000 [ 278.934195][ T28] audit: type=1326 audit(1772418192.697:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f7e4c799 code=0x7ffc0000 [ 278.991600][ T28] audit: type=1326 audit(1772418192.697:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f43f7e4c799 code=0x7ffc0000 [ 279.042641][ T28] audit: type=1326 audit(1772418192.697:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f7e4c799 code=0x7ffc0000 [ 279.097233][ T9806] loop6: detected capacity change from 0 to 512 [ 279.116916][ T28] audit: type=1326 audit(1772418192.697:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43f7e4c799 code=0x7ffc0000 [ 279.143124][ T28] audit: type=1326 audit(1772418192.697:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.6.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43f7e4c799 code=0x7ffc0000 [ 279.659075][ T9831] FAULT_INJECTION: forcing a failure. [ 279.659075][ T9831] name failslab, interval 1, probability 0, space 0, times 0 [ 279.683863][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.0.1801 Not tainted syzkaller #0 PREEMPT(full) [ 279.683918][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.683930][ T9831] Call Trace: [ 279.683935][ T9831] [ 279.683941][ T9831] __dump_stack+0x1d/0x30 [ 279.684032][ T9831] dump_stack_lvl+0x95/0xd0 [ 279.684092][ T9831] dump_stack+0x15/0x1b [ 279.684110][ T9831] should_fail_ex+0x263/0x280 [ 279.684209][ T9831] should_failslab+0x8c/0xb0 [ 279.684227][ T9831] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 279.684282][ T9831] ? __alloc_skb+0x2d6/0x690 [ 279.684302][ T9831] ? __rtnl_unlock+0x95/0xb0 [ 279.684321][ T9831] __alloc_skb+0x2d6/0x690 [ 279.684341][ T9831] ? __alloc_skb+0x200/0x690 [ 279.684360][ T9831] netlink_ack+0xfd/0x500 [ 279.684440][ T9831] ? avc_has_perm_noaudit+0xab/0x130 [ 279.684465][ T9831] netlink_rcv_skb+0x192/0x220 [ 279.684487][ T9831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.684519][ T9831] rtnetlink_rcv+0x1c/0x30 [ 279.684566][ T9831] netlink_unicast+0x5c0/0x690 [ 279.684590][ T9831] netlink_sendmsg+0x5c8/0x6f0 [ 279.684628][ T9831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.684700][ T9831] ____sys_sendmsg+0x5af/0x600 [ 279.684726][ T9831] ___sys_sendmsg+0x195/0x1e0 [ 279.684749][ T9831] ? path_openat+0x1b01/0x2050 [ 279.684839][ T9831] __sys_sendmmsg+0x185/0x320 [ 279.684957][ T9831] __x64_sys_sendmmsg+0x57/0x70 [ 279.684984][ T9831] x64_sys_call+0x27aa/0x3020 [ 279.685009][ T9831] do_syscall_64+0x12c/0x370 [ 279.685081][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.685159][ T9831] RIP: 0033:0x7f92f41ac799 [ 279.685174][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.685192][ T9831] RSP: 002b:00007f92f2c07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.685213][ T9831] RAX: ffffffffffffffda RBX: 00007f92f4425fa0 RCX: 00007f92f41ac799 [ 279.685225][ T9831] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 279.685238][ T9831] RBP: 00007f92f2c07090 R08: 0000000000000000 R09: 0000000000000000 [ 279.685299][ T9831] R10: ff00000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.685313][ T9831] R13: 00007f92f4426038 R14: 00007f92f4425fa0 R15: 00007ffea252a4f8 [ 279.685402][ T9831] [ 279.686527][ T9835] 9p: Bad value for 'rfdno' [ 279.821597][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 279.831753][ T9822] loop2: detected capacity change from 0 to 1024 [ 279.859737][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'. [ 279.868280][ T9822] EXT4-fs: Ignoring removed nobh option [ 279.892190][ T55] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.980930][ T55] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.981173][ T9822] EXT4-fs (loop2): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 279.993188][ T55] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.009635][ T55] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.054538][ T9822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.104602][ T9850] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 280.137216][ T9854] loop0: detected capacity change from 0 to 1024 [ 280.203819][ T9854] EXT4-fs: Ignoring removed orlov option [ 280.211444][ T9854] EXT4-fs: Ignoring removed bh option [ 280.255973][ T9859] loop1: detected capacity change from 0 to 128 [ 280.325554][ T9854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.372913][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.436374][ T9854] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 280.455433][ T9863] netlink: 'syz.5.1814': attribute type 10 has an invalid length. [ 280.525209][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.806923][ T9865] bridge1: entered promiscuous mode [ 280.815369][ T9865] bridge1: entered allmulticast mode [ 281.176456][ T3585] kernel read not supported for file /mdstat (pid: 3585 comm: kworker/0:5) [ 281.208155][ T9882] loop0: detected capacity change from 0 to 512 [ 281.224504][ T9882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9882 comm=syz.0.1820 [ 281.280453][ T9882] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 281.374642][ T9888] bond2: (slave gretap1): making interface the new active one [ 281.390820][ T9888] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 281.418564][ T9882] vlan3: entered allmulticast mode [ 281.430130][ T9882] bond2: entered allmulticast mode [ 281.441477][ T9882] gretap1: entered allmulticast mode [ 281.453347][ T9882] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 281.488020][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1820'. [ 282.292142][ T9900] loop6: detected capacity change from 0 to 512 [ 282.311134][ T9902] netlink: 'syz.5.1825': attribute type 1 has an invalid length. [ 282.326481][ T9900] EXT4-fs: Ignoring removed nobh option [ 282.334447][ T9900] EXT4-fs (loop6): blocks per group (2) and clusters per group (8192) inconsistent [ 282.502032][ T9912] loop6: detected capacity change from 0 to 128 [ 282.990029][ T9923] loop1: detected capacity change from 0 to 128 [ 283.271652][ T9932] loop0: detected capacity change from 0 to 128 [ 283.313596][ T9932] loop0: detected capacity change from 0 to 1024 [ 283.351206][ T9932] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.408585][ T9932] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 283.430237][ T9932] EXT4-fs (loop0): orphan cleanup on readonly fs [ 283.458741][ T9932] __quota_error: 85 callbacks suppressed [ 283.458763][ T9932] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 283.596690][ T9932] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 283.630236][ T9932] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 283.656816][ T9932] EXT4-fs (loop0): 1 truncate cleaned up [ 283.669001][ T9932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.701527][ T9933] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.1837: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 283.751272][ T9934] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.1837: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 283.906420][ T3310] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /368/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 283.958436][ T3310] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 283.987080][ T3310] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 284.052640][ T9947] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1840'. [ 284.131138][ T9945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.217808][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 284.265078][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 284.279467][ T358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.298628][ T358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 36697 - 0 [ 284.337137][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 284.356832][ T9966] loop6: detected capacity change from 0 to 1024 [ 284.367027][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 284.376841][ T358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.383084][ T9966] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.391580][ T358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 36697 - 0 [ 284.425461][ T9966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 284.437682][ T9966] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.477232][ T358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.509312][ T358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 36697 - 0 [ 284.522017][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 284.545032][ T9979] pim6reg1: entered promiscuous mode [ 284.550460][ T9979] pim6reg1: entered allmulticast mode [ 284.598920][ T358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.624429][ T358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 36697 - 0 [ 284.713819][ T3585] kernel read not supported for file /mdstat (pid: 3585 comm: kworker/0:5) [ 284.726212][ T28] audit: type=1326 audit(1772418198.529:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.753480][ T28] audit: type=1326 audit(1772418198.529:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.774493][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 284.777041][ T28] audit: type=1326 audit(1772418198.529:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.807193][ T28] audit: type=1326 audit(1772418198.529:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.830774][ T28] audit: type=1326 audit(1772418198.529:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.854135][ T28] audit: type=1326 audit(1772418198.529:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.887198][ T28] audit: type=1326 audit(1772418198.529:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.930826][ T28] audit: type=1326 audit(1772418198.529:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 284.951395][T10005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1856'. [ 284.963710][ T28] audit: type=1326 audit(1772418198.549:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.2.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 285.115215][ T358] bond2 (unregistering): (slave gretap1): Releasing active interface [ 285.134567][ T358] gretap1 (unregistering): left allmulticast mode [ 285.198404][ T358] bond0 (unregistering): Released all slaves [ 285.208288][ T358] bond1 (unregistering): Released all slaves [ 285.217570][ T358] bond2 (unregistering): Released all slaves [ 285.233200][T10027] program syz.6.1858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.281218][ T358] hsr_slave_0: left promiscuous mode [ 285.345438][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.352814][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.360365][ T9961] bridge_slave_0: entered allmulticast mode [ 285.367056][ T9961] bridge_slave_0: entered promiscuous mode [ 285.397254][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.404801][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.412313][ T9961] bridge_slave_1: entered allmulticast mode [ 285.419876][ T9961] bridge_slave_1: entered promiscuous mode [ 285.481030][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.542430][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.577823][ T9961] team0: Port device team_slave_0 added [ 285.597643][ T9961] team0: Port device team_slave_1 added [ 285.629722][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.641627][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.669270][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.685300][ T358] IPVS: stop unused estimator thread 0... [ 285.699639][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.718856][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.771747][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.809537][ T9961] hsr_slave_0: entered promiscuous mode [ 285.815677][ T9961] hsr_slave_1: entered promiscuous mode [ 285.821765][ T9961] debugfs: 'hsr0' already exists in 'hsr' [ 285.827560][ T9961] Cannot create hsr debugfs directory [ 285.984745][T10060] loop2: detected capacity change from 0 to 164 [ 286.054610][ T9961] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.081013][ T9961] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.100067][ T9961] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.111079][T10076] 9p: Bad value for 'rfdno' [ 286.119920][ T9961] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 286.206964][T10087] 9p: Bad value for 'rfdno' [ 286.216867][T10060] FAULT_INJECTION: forcing a failure. [ 286.216867][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 286.243695][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.2.1862 Not tainted syzkaller #0 PREEMPT(full) [ 286.243721][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.243782][T10060] Call Trace: [ 286.243787][T10060] [ 286.243794][T10060] __dump_stack+0x1d/0x30 [ 286.243816][T10060] dump_stack_lvl+0x95/0xd0 [ 286.243838][T10060] dump_stack+0x15/0x1b [ 286.243857][T10060] should_fail_ex+0x263/0x280 [ 286.243933][T10060] should_failslab+0x8c/0xb0 [ 286.243959][T10060] __kvmalloc_node_noprof+0x155/0x650 [ 286.244009][T10060] ? alloc_fdtable+0xc2/0x1d0 [ 286.244100][T10060] alloc_fdtable+0xc2/0x1d0 [ 286.244118][T10060] dup_fd+0x492/0x510 [ 286.244232][T10060] ? _raw_spin_unlock+0x9/0x30 [ 286.244261][T10060] ksys_unshare+0x368/0x6f0 [ 286.244337][T10060] ? ksys_write+0x194/0x1a0 [ 286.244373][T10060] __x64_sys_unshare+0x1f/0x30 [ 286.244397][T10060] x64_sys_call+0x1cef/0x3020 [ 286.244480][T10060] do_syscall_64+0x12c/0x370 [ 286.244498][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.244517][T10060] RIP: 0033:0x7f6e4ae7c799 [ 286.244582][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.244598][T10060] RSP: 002b:00007f6e498cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 286.244619][T10060] RAX: ffffffffffffffda RBX: 00007f6e4b0f5fa0 RCX: 00007f6e4ae7c799 [ 286.244632][T10060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 286.244643][T10060] RBP: 00007f6e498cf090 R08: 0000000000000000 R09: 0000000000000000 [ 286.244656][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.244732][T10060] R13: 00007f6e4b0f6038 R14: 00007f6e4b0f5fa0 R15: 00007ffecf7bc568 [ 286.244780][T10060] [ 286.529779][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.557601][T10100] loop6: detected capacity change from 0 to 512 [ 286.565332][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.596062][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.603143][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.613699][T10100] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 286.639749][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.646850][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.655334][T10100] EXT4-fs (loop6): mount failed [ 286.690054][ T9961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.691630][T10116] loop1: detected capacity change from 0 to 128 [ 286.704325][ T9961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.862256][T10135] 9p: Bad value for 'rfdno' [ 286.908628][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.034792][ T9961] veth0_vlan: entered promiscuous mode [ 287.045146][ T9961] veth1_vlan: entered promiscuous mode [ 287.060845][ T9961] veth0_macvtap: entered promiscuous mode [ 287.069639][ T9961] veth1_macvtap: entered promiscuous mode [ 287.081571][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.093627][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.109922][ T1886] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.123078][ T1886] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.146486][ T1886] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.162979][ T1886] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.176224][T10160] loop6: detected capacity change from 0 to 512 [ 287.201757][T10160] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.232900][T10160] EXT4-fs (loop6): 1 truncate cleaned up [ 287.265580][T10160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.296262][T10172] netlink: 'syz.2.1883': attribute type 32 has an invalid length. [ 287.309813][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 287.325531][T10172] bond7: option coupled_control: invalid value (77) [ 287.334380][T10172] bond7 (unregistering): Released all slaves [ 287.661498][T10190] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1890'. [ 287.708442][T10190] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1890'. [ 287.990161][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.117498][T10215] netlink: 'syz.6.1896': attribute type 32 has an invalid length. [ 288.167226][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1896'. [ 288.262493][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 288.290921][T10215] bond1: option coupled_control: invalid value (77) [ 288.299420][T10215] bond1 (unregistering): Released all slaves [ 288.410630][T10225] loop6: detected capacity change from 0 to 128 [ 288.912243][T10249] SET target dimension over the limit! [ 288.960821][T10253] vlan3: entered allmulticast mode [ 288.976372][T10253] bond2: entered allmulticast mode [ 289.423697][ T3350] kernel read not supported for file /mdstat (pid: 3350 comm: kworker/0:2) [ 289.449325][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 289.449338][ T28] audit: type=1326 audit(1772418203.229:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 289.479391][ T28] audit: type=1326 audit(1772418203.229:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 289.503016][ T28] audit: type=1326 audit(1772418203.229:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 290.500145][ T28] audit: type=1326 audit(1772418203.229:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 290.550779][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 290.568021][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'. [ 290.592869][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 290.668114][T10276] bond6: option lacp_active: invalid value (5) [ 290.683542][T10299] loop6: detected capacity change from 0 to 512 [ 290.702257][T10299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.750888][T10299] netlink: 'syz.6.1922': attribute type 21 has an invalid length. [ 291.076760][ T28] audit: type=1326 audit(1772418203.229:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 291.101149][ T28] audit: type=1326 audit(1772418203.229:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 291.127125][ T28] audit: type=1326 audit(1772418203.239:6637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 291.150902][ T28] audit: type=1326 audit(1772418203.239:6638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 291.174889][ T28] audit: type=1326 audit(1772418203.239:6639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 291.198693][ T28] audit: type=1326 audit(1772418203.239:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10272 comm="syz.1.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 291.355438][T10276] bond6 (unregistering): Released all slaves [ 291.371341][T10299] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1922'. [ 291.498195][ T3476] kernel read not supported for file /mdstat (pid: 3476 comm: kworker/1:7) [ 291.561642][T10324] 9p: Bad value for 'rfdno' [ 291.600702][T10329] netlink: 'syz.5.1927': attribute type 32 has an invalid length. [ 291.612679][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 291.634087][T10329] bond6: option coupled_control: invalid value (77) [ 291.641732][T10329] bond6 (unregistering): Released all slaves [ 291.650270][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.876462][T10321] loop1: detected capacity change from 0 to 1764 [ 292.664954][T10341] loop6: detected capacity change from 0 to 128 [ 293.565495][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1935'. [ 294.404771][T10310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.488634][ T3350] kernel read not supported for file /mdstat (pid: 3350 comm: kworker/0:2) [ 294.500778][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 294.500857][ T28] audit: type=1326 audit(1772418208.258:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.541656][ T28] audit: type=1326 audit(1772418208.298:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.565950][ T28] audit: type=1326 audit(1772418208.298:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.648268][T10370] loop2: detected capacity change from 0 to 1024 [ 294.665526][ T28] audit: type=1326 audit(1772418208.298:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.695064][ T28] audit: type=1326 audit(1772418208.298:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.720553][ T28] audit: type=1326 audit(1772418208.298:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.745566][ T28] audit: type=1326 audit(1772418208.298:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.825606][ T28] audit: type=1326 audit(1772418208.298:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.879762][T10377] netlink: 'syz.7.1942': attribute type 32 has an invalid length. [ 294.917525][T10370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 294.954233][ T28] audit: type=1326 audit(1772418208.298:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 294.989600][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1942'. [ 295.003339][T10370] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.019861][T10379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 295.073861][T10370] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.1941: lblock 3 mapped to illegal pblock 3 (length 1) [ 295.103713][ T28] audit: type=1326 audit(1772418208.298:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.7.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89bd9c799 code=0x7ffc0000 [ 295.172050][T10370] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 295.224404][T10377] bond1: option coupled_control: invalid value (77) [ 295.234420][T10370] EXT4-fs (loop2): This should not happen!! Data will be lost [ 295.234420][T10370] [ 295.269254][T10377] bond1 (unregistering): Released all slaves [ 295.282944][T10384] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.1941: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 295.349311][T10384] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 295.412211][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 295.466958][T10391] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 295.692211][T10397] netlink: 'syz.6.1947': attribute type 32 has an invalid length. [ 295.720750][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1947'. [ 295.779389][T10397] bond1: option coupled_control: invalid value (77) [ 295.791249][T10397] bond1 (unregistering): Released all slaves [ 295.808880][T10414] FAULT_INJECTION: forcing a failure. [ 295.808880][T10414] name failslab, interval 1, probability 0, space 0, times 0 [ 295.821851][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1954'. [ 295.831093][T10414] CPU: 0 UID: 0 PID: 10414 Comm: syz.2.1953 Not tainted syzkaller #0 PREEMPT(full) [ 295.831121][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.831133][T10414] Call Trace: [ 295.831140][T10414] [ 295.831148][T10414] __dump_stack+0x1d/0x30 [ 295.831236][T10414] dump_stack_lvl+0x95/0xd0 [ 295.831256][T10414] dump_stack+0x15/0x1b [ 295.831272][T10414] should_fail_ex+0x263/0x280 [ 295.831292][T10414] should_failslab+0x8c/0xb0 [ 295.831389][T10414] __kmalloc_noprof+0xb8/0x4e0 [ 295.831410][T10414] ? copy_splice_read+0xc2/0x6c0 [ 295.831429][T10414] copy_splice_read+0xc2/0x6c0 [ 295.831549][T10414] ? __pfx_copy_splice_read+0x10/0x10 [ 295.831565][T10414] splice_direct_to_actor+0x26e/0x670 [ 295.831586][T10414] ? __pfx_direct_splice_actor+0x10/0x10 [ 295.831611][T10414] do_splice_direct+0x119/0x1a0 [ 295.831635][T10414] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 295.831658][T10414] do_sendfile+0x382/0x650 [ 295.831682][T10414] __x64_sys_sendfile64+0x105/0x150 [ 295.831702][T10414] x64_sys_call+0x2dc4/0x3020 [ 295.831787][T10414] do_syscall_64+0x12c/0x370 [ 295.831809][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.831828][T10414] RIP: 0033:0x7f6e4ae7c799 [ 295.831908][T10414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.831990][T10414] RSP: 002b:00007f6e498cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 295.832087][T10414] RAX: ffffffffffffffda RBX: 00007f6e4b0f5fa0 RCX: 00007f6e4ae7c799 [ 295.832175][T10414] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 295.832187][T10414] RBP: 00007f6e498cf090 R08: 0000000000000000 R09: 0000000000000000 [ 295.832201][T10414] R10: 0000000002000006 R11: 0000000000000246 R12: 0000000000000002 [ 295.832212][T10414] R13: 00007f6e4b0f6038 R14: 00007f6e4b0f5fa0 R15: 00007ffecf7bc568 [ 295.832258][T10414] [ 296.066956][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1957'. [ 296.076896][T10424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1957'. [ 296.158155][T10431] FAULT_INJECTION: forcing a failure. [ 296.158155][T10431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.297103][T10431] CPU: 1 UID: 0 PID: 10431 Comm: syz.7.1961 Not tainted syzkaller #0 PREEMPT(full) [ 296.297131][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.297142][T10431] Call Trace: [ 296.297147][T10431] [ 296.297155][T10431] __dump_stack+0x1d/0x30 [ 296.297236][T10431] dump_stack_lvl+0x95/0xd0 [ 296.297258][T10431] dump_stack+0x15/0x1b [ 296.297279][T10431] should_fail_ex+0x263/0x280 [ 296.297337][T10431] should_fail+0xb/0x20 [ 296.297357][T10431] should_fail_usercopy+0x1a/0x20 [ 296.297377][T10431] _copy_from_user+0x1c/0xb0 [ 296.297440][T10431] ___sys_sendmsg+0xc1/0x1e0 [ 296.297594][T10431] __x64_sys_sendmsg+0xd4/0x160 [ 296.297688][T10431] x64_sys_call+0x194c/0x3020 [ 296.297773][T10431] do_syscall_64+0x12c/0x370 [ 296.297794][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.297815][T10431] RIP: 0033:0x7ff89bd9c799 [ 296.297831][T10431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.297848][T10431] RSP: 002b:00007ff89a7ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.297944][T10431] RAX: ffffffffffffffda RBX: 00007ff89c015fa0 RCX: 00007ff89bd9c799 [ 296.297959][T10431] RDX: 0000000004004014 RSI: 0000200000000000 RDI: 0000000000000004 [ 296.297981][T10431] RBP: 00007ff89a7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 296.297994][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.298007][T10431] R13: 00007ff89c016038 R14: 00007ff89c015fa0 R15: 00007ffe6601abf8 [ 296.298024][T10431] [ 296.678902][T10448] netlink: 'syz.2.1960': attribute type 32 has an invalid length. [ 296.688036][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 296.719421][T10448] bond7: option coupled_control: invalid value (77) [ 296.737502][T10447] SELinux: failed to load policy [ 296.747617][T10448] bond7 (unregistering): Released all slaves [ 296.998182][T10462] loop1: detected capacity change from 0 to 128 [ 297.369786][T10486] netlink: 'syz.1.1970': attribute type 32 has an invalid length. [ 297.377682][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 297.422051][T10491] loop7: detected capacity change from 0 to 128 [ 297.432625][T10491] EXT4-fs: Ignoring removed nobh option [ 297.475612][T10491] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.485779][T10486] bond3: option coupled_control: invalid value (77) [ 297.502492][T10486] bond3 (unregistering): Released all slaves [ 297.536393][T10491] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 297.543266][T10500] xt_hashlimit: size too large, truncated to 1048576 [ 297.632879][ T9961] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.654662][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1981'. [ 297.674574][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1981'. [ 297.798317][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1980'. [ 297.872216][T10524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1984'. [ 298.030691][T10526] netlink: 'syz.1.1984': attribute type 1 has an invalid length. [ 298.072503][T10526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.123606][T10535] bond3: (slave veth3): Enslaving as an active interface with a down link [ 299.059133][T10551] netlink: 'syz.5.1989': attribute type 32 has an invalid length. [ 299.188397][T10551] bond6: option coupled_control: invalid value (77) [ 299.225080][T10551] bond6 (unregistering): Released all slaves [ 299.268604][T10570] loop7: detected capacity change from 0 to 4096 [ 299.282388][T10570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.323345][T10581] loop2: detected capacity change from 0 to 2048 [ 299.378923][T10577] netlink: 'syz.2.1994': attribute type 7 has an invalid length. [ 299.418237][ T9961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.428688][T10591] loop6: detected capacity change from 0 to 128 [ 299.613906][T10606] loop2: detected capacity change from 0 to 128 [ 299.723577][T10620] smc: net device gretap0 applied user defined pnetid SYZ0 [ 299.832380][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 299.832393][ T28] audit: type=1400 audit(1772418213.569:6754): avc: denied { map } for pid=10638 comm="syz.2.2010" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 299.917932][T10642] netlink: 'syz.5.2007': attribute type 32 has an invalid length. [ 299.932629][T10649] vlan2: entered promiscuous mode [ 299.937763][T10649] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 299.957324][T10642] bond6: option coupled_control: invalid value (77) [ 299.968978][T10642] bond6 (unregistering): Released all slaves [ 300.004748][T10656] loop2: detected capacity change from 0 to 1764 [ 300.099396][T10668] netlink: 'syz.1.2012': attribute type 32 has an invalid length. [ 300.210240][T10681] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 300.227446][ T28] audit: type=1400 audit(1772418213.957:6755): avc: denied { getopt } for pid=10678 comm="syz.5.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.236795][T10668] bond4: option coupled_control: invalid value (77) [ 300.259758][T10668] bond4 (unregistering): Released all slaves [ 300.335428][T10692] loop6: detected capacity change from 0 to 512 [ 300.362815][T10699] syzkaller1: entered promiscuous mode [ 300.377353][T10705] loop7: detected capacity change from 0 to 128 [ 300.391778][T10699] syzkaller1: entered allmulticast mode [ 300.444559][T10708] tipc: Enabling of bearer rejected, already enabled [ 300.465703][T10711] netlink: 'syz.7.2024': attribute type 4 has an invalid length. [ 300.467264][T10708] loop2: detected capacity change from 0 to 1024 [ 300.527811][T10708] EXT4-fs: inline encryption not supported [ 300.580579][T10708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.794361][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.929323][T10724] loop1: detected capacity change from 0 to 4096 [ 300.951401][T10724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.992874][T10729] __nla_validate_parse: 14 callbacks suppressed [ 300.992888][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2029'. [ 301.036609][T10730] netlink: 'syz.2.2027': attribute type 32 has an invalid length. [ 301.063352][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2027'. [ 301.114135][T10730] bond7: option coupled_control: invalid value (77) [ 301.320991][T10730] bond7 (unregistering): Released all slaves [ 301.377795][T10737] loop7: detected capacity change from 0 to 128 [ 301.489429][T10739] tipc: Enabling of bearer rejected, failed to enable media [ 301.498823][T10739] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2032'. [ 301.515772][T10739] loop6: detected capacity change from 0 to 1024 [ 301.535196][T10753] netlink: 'syz.7.2035': attribute type 1 has an invalid length. [ 301.551387][T10739] EXT4-fs: inline encryption not supported [ 301.554009][T10753] netlink: 'syz.7.2035': attribute type 1 has an invalid length. [ 301.588371][T10739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.600943][T10753] netlink: 'syz.7.2035': attribute type 1 has an invalid length. [ 301.611394][T10753] netlink: 'syz.7.2035': attribute type 2 has an invalid length. [ 301.619162][T10753] netlink: 'syz.7.2035': attribute type 2 has an invalid length. [ 301.673981][T10755] netlink: 'syz.5.2036': attribute type 32 has an invalid length. [ 301.681935][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'. [ 301.697427][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.708254][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.723067][T10755] bond0: option coupled_control: invalid value (77) [ 301.873348][T10755] bond0 (unregistering): Released all slaves [ 301.998954][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2038'. [ 302.032683][T10767] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2038'. [ 302.069191][T10767] geneve2: entered promiscuous mode [ 302.089290][T10767] geneve2: entered allmulticast mode [ 302.113889][ T230] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 45789 - 0 [ 302.134954][ T230] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 45789 - 0 [ 302.159474][ T230] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 45789 - 0 [ 302.192214][ T230] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 45789 - 0 [ 302.497008][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2039'. [ 302.539113][T10771] netlink: 184 bytes leftover after parsing attributes in process `syz.7.2040'. [ 302.626612][T10772] loop7: detected capacity change from 0 to 512 [ 302.648552][T10772] EXT4-fs: Ignoring removed nobh option [ 302.686571][T10772] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 302.760645][T10772] EXT4-fs (loop7): 1 truncate cleaned up [ 302.780264][ T28] audit: type=1400 audit(1772418216.508:6756): avc: denied { create } for pid=10781 comm="syz.6.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 302.811893][T10772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.824330][ T28] audit: type=1400 audit(1772418216.538:6757): avc: denied { sys_admin } for pid=10781 comm="syz.6.2042" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 302.864965][ T28] audit: type=1400 audit(1772418216.578:6758): avc: denied { mount } for pid=10781 comm="syz.6.2042" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 302.942533][T10795] loop2: detected capacity change from 0 to 128 [ 303.056268][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2045'. [ 303.178443][T10806] loop1: detected capacity change from 0 to 256 [ 303.194775][T10806] FAT-fs (loop1): Directory bread(block 64) failed [ 303.201343][T10806] FAT-fs (loop1): Directory bread(block 65) failed [ 303.208157][T10806] FAT-fs (loop1): Directory bread(block 66) failed [ 303.214718][T10806] FAT-fs (loop1): Directory bread(block 67) failed [ 303.221371][T10806] FAT-fs (loop1): Directory bread(block 68) failed [ 303.227949][T10806] FAT-fs (loop1): Directory bread(block 69) failed [ 303.234495][T10806] FAT-fs (loop1): Directory bread(block 70) failed [ 303.241108][T10806] FAT-fs (loop1): Directory bread(block 71) failed [ 303.247707][T10806] FAT-fs (loop1): Directory bread(block 72) failed [ 303.254222][T10806] FAT-fs (loop1): Directory bread(block 73) failed [ 303.275045][T10793] bond0: option coupled_control: invalid value (77) [ 303.309350][ T28] audit: type=1400 audit(1772418217.017:6759): avc: denied { execute } for pid=10803 comm="syz.2.2048" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 304.988394][T10793] bond0 (unregistering): Released all slaves [ 305.076315][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2050'. [ 305.226998][ T28] audit: type=1400 audit(1772418218.950:6760): avc: denied { recv } for pid=10816 comm="syz.6.2052" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 305.252154][T10818] xt_hashlimit: size too large, truncated to 1048576 [ 305.329122][T10823] validate_nla: 2 callbacks suppressed [ 305.329138][T10823] netlink: 'syz.5.2051': attribute type 32 has an invalid length. [ 305.357159][T10824] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 305.427575][T10823] bond6: option coupled_control: invalid value (77) [ 305.473525][T10823] bond6 (unregistering): Released all slaves [ 305.602285][T10827] bond1: entered promiscuous mode [ 305.655368][T10827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.822833][T10824] bridge2: entered promiscuous mode [ 305.867874][T10771] syz.7.2040 (10771) used greatest stack depth: 5880 bytes left [ 305.887918][T10824] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 305.906179][ T9961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.422506][T10856] netlink: 'syz.5.2060': attribute type 32 has an invalid length. [ 306.425759][T10862] __nla_validate_parse: 2 callbacks suppressed [ 306.425774][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2061'. [ 306.483960][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2060'. [ 306.631837][T10856] bond6: option coupled_control: invalid value (77) [ 306.656274][T10856] bond6 (unregistering): Released all slaves [ 306.737690][T10874] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2065'. [ 306.750216][ T23] IPVS: starting estimator thread 0... [ 306.853955][T10879] netlink: 'syz.1.2066': attribute type 32 has an invalid length. [ 306.861966][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 306.895463][T10879] bond4: option coupled_control: invalid value (77) [ 306.919854][T10879] bond4 (unregistering): Released all slaves [ 306.959543][T10877] IPVS: using max 2352 ests per chain, 117600 per kthread [ 307.353538][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2070'. [ 307.599845][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2078'. [ 307.618164][T10913] loop7: detected capacity change from 0 to 512 [ 307.636665][T10911] bond2: entered promiscuous mode [ 307.642085][T10911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.659942][T10911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.671519][T10911] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 307.684394][T10911] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 307.914022][T10927] loop2: detected capacity change from 0 to 2048 [ 307.949767][T10927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.037393][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'. [ 308.054119][T10927] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2083: bg 0: block 234: padding at end of block bitmap is not set [ 308.069362][T10927] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 308.082399][T10927] EXT4-fs (loop2): This should not happen!! Data will be lost [ 308.082399][T10927] [ 308.092609][T10927] EXT4-fs (loop2): Total free blocks count 0 [ 308.105427][T10942] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2096'. [ 308.115879][T10944] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2086'. [ 308.128865][ T28] audit: type=1400 audit(1772418221.841:6761): avc: denied { read } for pid=10932 comm="syz.5.2085" path="socket:[31181]" dev="sockfs" ino=31181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.163385][T10927] EXT4-fs (loop2): Free/Dirty block details [ 308.169500][T10927] EXT4-fs (loop2): free_blocks=0 [ 308.191178][T10927] EXT4-fs (loop2): dirty_blocks=64 [ 308.218458][T10927] EXT4-fs (loop2): Block reservation details [ 308.240737][T10927] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 308.254541][T10951] netlink: 'syz.5.2088': attribute type 32 has an invalid length. [ 308.268829][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2088'. [ 308.301207][T10951] bond6: option coupled_control: invalid value (77) [ 308.308940][T10951] bond6 (unregistering): Released all slaves [ 308.441924][ T358] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 308.485679][T10958] ip6tnl0: Caught tx_queue_len zero misconfig [ 308.493511][ T28] audit: type=1400 audit(1772418222.200:6762): avc: denied { map } for pid=10957 comm="syz.5.2091" path="socket:[32184]" dev="sockfs" ino=32184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 308.522564][T10962] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20265 [ 308.562663][T10964] netlink: 'syz.5.2092': attribute type 32 has an invalid length. [ 308.575735][T10964] bond0: option coupled_control: invalid value (77) [ 308.583157][T10964] bond0 (unregistering): Released all slaves [ 308.612031][T10966] loop2: detected capacity change from 0 to 8192 [ 308.626021][ T28] audit: type=1400 audit(1772418222.339:6763): avc: denied { mounton } for pid=10961 comm="syz.2.2090" path="/383/file2/bus" dev="loop2" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 308.669182][ T3314] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 308.677231][ T3314] FAT-fs (loop2): Filesystem has been set read-only [ 308.684445][ T28] audit: type=1400 audit(1772418222.399:6764): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.813743][T10981] 9p: Bad value for 'wfdno' [ 309.882478][T10990] FAULT_INJECTION: forcing a failure. [ 309.882478][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.907531][T10990] CPU: 1 UID: 0 PID: 10990 Comm: syz.6.2101 Not tainted syzkaller #0 PREEMPT(full) [ 309.907567][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 309.907579][T10990] Call Trace: [ 309.907586][T10990] [ 309.907594][T10990] __dump_stack+0x1d/0x30 [ 309.907618][T10990] dump_stack_lvl+0x95/0xd0 [ 309.907672][T10990] dump_stack+0x15/0x1b [ 309.907713][T10990] should_fail_ex+0x263/0x280 [ 309.907735][T10990] should_fail+0xb/0x20 [ 309.907750][T10990] should_fail_usercopy+0x1a/0x20 [ 309.907769][T10990] strncpy_from_user+0x27/0x250 [ 309.907807][T10990] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 309.907831][T10990] do_getname+0x59/0x1c0 [ 309.907853][T10990] getname_uflags+0x23/0x30 [ 309.907874][T10990] do_fchmodat+0x6f/0x170 [ 309.907897][T10990] __x64_sys_fchmodat+0x42/0x50 [ 309.907942][T10990] x64_sys_call+0x1691/0x3020 [ 309.907968][T10990] do_syscall_64+0x12c/0x370 [ 309.907987][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.908006][T10990] RIP: 0033:0x7f43f7e4c799 [ 309.908035][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.908049][T10990] RSP: 002b:00007f43f68a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 309.908135][T10990] RAX: ffffffffffffffda RBX: 00007f43f80c5fa0 RCX: 00007f43f7e4c799 [ 309.908150][T10990] RDX: 00000000ffffffd3 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 309.908163][T10990] RBP: 00007f43f68a7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.908174][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.908193][T10990] R13: 00007f43f80c6038 R14: 00007f43f80c5fa0 R15: 00007ffccbfdda48 [ 309.908210][T10990] [ 310.080175][T10995] loop1: detected capacity change from 0 to 128 [ 310.170609][T10986] netlink: 'syz.5.2100': attribute type 32 has an invalid length. [ 310.221051][T10986] bond0: option coupled_control: invalid value (77) [ 310.228600][T10986] bond0 (unregistering): Released all slaves [ 310.237027][T11003] netlink: 'syz.2.2105': attribute type 32 has an invalid length. [ 310.261744][T11005] loop6: detected capacity change from 0 to 128 [ 310.295370][T11003] bond7: option coupled_control: invalid value (77) [ 310.415871][T11003] bond7 (unregistering): Released all slaves [ 310.489520][ T28] audit: type=1400 audit(1772418224.194:6765): avc: denied { ioctl } for pid=11013 comm="syz.7.2108" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 311.732963][T11034] ipip0: entered promiscuous mode [ 311.876599][T11044] netlink: 'syz.2.2117': attribute type 32 has an invalid length. [ 311.914006][T11044] __nla_validate_parse: 6 callbacks suppressed [ 311.914022][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 312.003040][T11048] netlink: 'syz.5.2113': attribute type 21 has an invalid length. [ 312.064857][T11048] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2113'. [ 312.124805][T11048] netlink: 'syz.5.2113': attribute type 5 has an invalid length. [ 312.163990][T11048] netlink: 'syz.5.2113': attribute type 6 has an invalid length. [ 312.228434][T11048] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2113'. [ 312.295109][ T28] audit: type=1400 audit(1772418225.979:6766): avc: denied { egress } for pid=10 comm="kworker/0:1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 312.326884][T11044] bond0: option coupled_control: invalid value (77) [ 312.354547][T11044] bond0 (unregistering): Released all slaves [ 312.383768][ T28] audit: type=1400 audit(1772418225.979:6767): avc: denied { sendto } for pid=10 comm="kworker/0:1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 312.461688][T11052] netlink: 'syz.2.2119': attribute type 10 has an invalid length. [ 312.475833][T11052] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2119'. [ 312.616495][T11055] netlink: 'syz.2.2120': attribute type 32 has an invalid length. [ 312.624361][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 312.645446][T11055] bond7: option coupled_control: invalid value (77) [ 312.676921][T11055] bond7 (unregistering): Released all slaves [ 312.877244][T11065] netlink: 'syz.7.2122': attribute type 32 has an invalid length. [ 312.885158][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2122'. [ 313.047586][T11065] bond1: option coupled_control: invalid value (77) [ 313.085878][T11065] bond1 (unregistering): Released all slaves [ 314.227946][T11085] netlink: 'syz.2.2130': attribute type 32 has an invalid length. [ 314.462865][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 314.877127][T11085] bond7: option coupled_control: invalid value (77) [ 314.924147][T11085] bond7 (unregistering): Released all slaves [ 315.583933][T11097] netlink: 'syz.2.2133': attribute type 32 has an invalid length. [ 315.605346][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 315.686722][T11097] bond7: option coupled_control: invalid value (77) [ 315.738592][T11097] bond7 (unregistering): Released all slaves [ 315.821732][T11101] syzkaller0: entered promiscuous mode [ 315.845279][T11101] syzkaller0: entered allmulticast mode [ 316.139042][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'. [ 316.682358][T11123] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2139'. [ 316.843710][T11125] loop2: detected capacity change from 0 to 164 [ 316.901022][T11129] sch_tbf: burst 4 is lower than device team_slave_0 mtu (1550) ! [ 316.963744][T11129] loop1: detected capacity change from 0 to 2048 [ 317.002173][T11129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.076555][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.252669][T11141] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 317.263346][T11142] netlink: 'syz.1.2145': attribute type 32 has an invalid length. [ 317.291626][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 317.396237][T11142] bond4: option coupled_control: invalid value (77) [ 317.537352][T11142] bond4 (unregistering): Released all slaves [ 317.919417][T11158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2152'. [ 317.998595][T11166] loop2: detected capacity change from 0 to 128 [ 318.018654][ T28] audit: type=1400 audit(1772418231.702:6768): avc: denied { write } for pid=11170 comm="syz.7.2155" path="socket:[32573]" dev="sockfs" ino=32573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 318.411360][T11183] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2158'. [ 318.516845][T11187] netlink: 'syz.5.2160': attribute type 32 has an invalid length. [ 318.541372][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2160'. [ 318.561208][T11187] bond0: option coupled_control: invalid value (77) [ 318.568590][T11187] bond0 (unregistering): Released all slaves [ 318.848324][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2162'. [ 318.917633][ T28] audit: type=1400 audit(1772418232.600:6769): avc: denied { bind } for pid=11192 comm="syz.5.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 318.963825][T11198] netlink: 'syz.1.2161': attribute type 32 has an invalid length. [ 318.998290][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 319.083469][T11198] bond4: option coupled_control: invalid value (77) [ 319.093412][T11198] bond4 (unregistering): Released all slaves [ 319.189622][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2163'. [ 319.206454][ T28] audit: type=1400 audit(1772418232.889:6770): avc: denied { read } for pid=11200 comm="syz.5.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 319.520596][T11217] loop1: detected capacity change from 0 to 1764 [ 319.533497][T11215] loop7: detected capacity change from 0 to 4096 [ 319.552725][T11217] iso9660: Unknown parameter 'W՘ #ͯj [ 319.552725][T11217] {ϑBibY[fߴX**JNS:ʍm詒z8Ɛ'(¯a}' [ 319.604157][T11215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.651681][T11221] syzkaller0: entered promiscuous mode [ 319.661421][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2173'. [ 319.671552][ T28] audit: type=1400 audit(1772418233.348:6771): avc: denied { reparent } for pid=11214 comm="syz.7.2169" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.671615][T11215] EXT4-fs error (device loop7): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.7.2169: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 319.694772][ T28] audit: type=1400 audit(1772418233.348:6772): avc: denied { add_name } for pid=11214 comm="syz.7.2169" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 319.721700][T11221] syzkaller0: entered allmulticast mode [ 319.740354][T11215] EXT4-fs error (device loop7): ext4_get_first_dir_block:3550: inode #12: comm syz.7.2169: directory missing '..' [ 319.773500][T11225] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.801080][T11228] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 319.820129][T11228] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 319.854450][T11228] bond4: (slave ipvlan2): Error -95 calling set_mac_address [ 320.032217][T11237] netlink: 'syz.6.2175': attribute type 32 has an invalid length. [ 320.040233][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2175'. [ 320.051746][T11240] loop1: detected capacity change from 0 to 512 [ 320.103024][T11240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.133843][T11237] bond3: option coupled_control: invalid value (77) [ 320.153814][T11237] bond3 (unregistering): Released all slaves [ 320.164432][T11240] EXT4-fs (loop1): 1 truncate cleaned up [ 320.171870][T11240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.197576][ T28] audit: type=1326 audit(1772418233.867:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 320.267001][ T28] audit: type=1326 audit(1772418233.867:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 320.281125][ T9961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.317924][ T28] audit: type=1326 audit(1772418233.867:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 320.365986][ T28] audit: type=1326 audit(1772418233.867:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 320.397426][ T28] audit: type=1326 audit(1772418233.867:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11239 comm="syz.1.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd29f8ec799 code=0x7ffc0000 [ 320.553252][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2180'. [ 320.742571][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.120824][T11274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.133538][T11274] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 321.145941][T11274] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 321.157958][T11274] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 321.262543][T11281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.287767][T11279] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 321.303451][T11281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.345426][T11279] bond2 (unregistering): Released all slaves [ 321.643257][T11287] netem: incorrect ge model size [ 321.660236][T11287] netem: change failed [ 321.728650][T11289] netlink: 'syz.7.2190': attribute type 32 has an invalid length. [ 321.765380][T11289] bond2: option coupled_control: invalid value (77) [ 321.796901][T11289] bond2 (unregistering): Released all slaves [ 321.911243][T11295] wireguard0: entered promiscuous mode [ 321.917117][T11295] wireguard0: entered allmulticast mode [ 322.020681][T11302] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 322.038070][T11302] syzkaller1: Linktype set failed because interface is up [ 322.189796][T11315] loop2: detected capacity change from 0 to 512 [ 322.202947][T11315] EXT4-fs: Ignoring removed bh option [ 322.248971][T11315] EXT4-fs: inline encryption not supported [ 322.282111][T11315] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 322.312224][T11315] EXT4-fs (loop2): fragment/cluster size (8192) != block size (4096) [ 322.515166][T11331] __nla_validate_parse: 5 callbacks suppressed [ 322.515180][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 322.553854][T11328] syzkaller0: entered promiscuous mode [ 322.564951][T11328] syzkaller0: entered allmulticast mode [ 322.582096][T11331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.602619][T11335] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 322.624562][T11335] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 322.665831][T11335] bond5: (slave ipvlan2): Error -95 calling set_mac_address [ 322.784380][T11343] loop7: detected capacity change from 0 to 512 [ 322.795206][T11343] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 322.814361][T11343] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 322.834366][T11343] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2210: bad orphan inode 4 [ 322.853566][T11343] fserror_report: 2 callbacks suppressed [ 322.853580][T11343] loop7: lost filesystem error report for type 5 error -117 [ 322.863523][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 322.877244][ C0] EXT4-fs (loop7): initial error at time 1772418236: ext4_orphan_get:1417 [ 322.885758][ C0] EXT4-fs (loop7): last error at time 1772418236: ext4_orphan_get:1417 [ 322.914320][T11343] EXT4-fs (loop7): 1 orphan inode deleted [ 322.920395][T11343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.977363][T11350] loop1: detected capacity change from 0 to 128 [ 323.489292][T11357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64 sclass=netlink_tcpdiag_socket pid=11357 comm=syz.6.2214 [ 323.666118][T11223] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 323.696710][T11362] loop6: detected capacity change from 0 to 128 [ 324.684600][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 324.684615][ T28] audit: type=1400 audit(1772418237.737:6853): avc: denied { recv } for pid=11349 comm="syz.1.2212" saddr=10.128.0.163 src=40634 daddr=10.128.0.21 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.365029][T11369] loop6: detected capacity change from 0 to 256 [ 326.529489][T11371] loop6: detected capacity change from 0 to 512 [ 326.567774][T11373] loop2: detected capacity change from 0 to 1024 [ 326.594311][T11371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 326.629473][T11373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.648459][T11371] System zones: 1-20 [ 326.673883][T11371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.709346][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2220'. [ 326.728393][ T28] audit: type=1326 audit(1772418240.391:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 326.755166][T11381] syzkaller0: entered promiscuous mode [ 326.760643][T11381] syzkaller0: entered allmulticast mode [ 326.768516][ T28] audit: type=1326 audit(1772418240.391:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6e4ae38bec code=0x7ffc0000 [ 326.793242][ T28] audit: type=1326 audit(1772418240.391:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6e4ae38c4e code=0x7ffc0000 [ 326.818603][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.825040][ T28] audit: type=1326 audit(1772418240.391:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 326.833806][T11379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.852143][ T28] audit: type=1326 audit(1772418240.391:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 326.865814][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.893298][ T28] audit: type=1326 audit(1772418240.391:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 326.917048][ T28] audit: type=1326 audit(1772418240.391:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e4ae3cfce code=0x7ffc0000 [ 326.940826][ T28] audit: type=1326 audit(1772418240.391:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 326.964407][ T28] audit: type=1326 audit(1772418240.391:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.2.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e4ae3cfce code=0x7ffc0000 [ 327.012593][T11386] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 327.025604][T11386] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 327.037372][T11386] bond6: (slave ipvlan3): Error -95 calling set_mac_address [ 327.075302][T11394] loop1: detected capacity change from 0 to 128 [ 327.158778][T11398] netlink: 'syz.6.2226': attribute type 4 has an invalid length. [ 327.250540][T11405] netlink: 'syz.2.2228': attribute type 41 has an invalid length. [ 327.378261][ T9961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.421641][T11414] loop7: detected capacity change from 0 to 128 [ 327.862076][T11424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'. [ 327.879425][T11424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2234'. [ 329.249115][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2238'. [ 329.422757][T11443] netlink: 'syz.5.2240': attribute type 32 has an invalid length. [ 329.454276][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2240'. [ 329.542065][T11443] bond7: option coupled_control: invalid value (77) [ 329.588991][T11443] bond7 (unregistering): Released all slaves [ 330.293040][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 330.293056][ T28] audit: type=1326 audit(1772418243.953:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.321911][T11452] sctp: [Deprecated]: syz.2.2243 (pid 11452) Use of int in max_burst socket option deprecated. [ 330.321911][T11452] Use struct sctp_assoc_value instead [ 330.364257][ T28] audit: type=1326 audit(1772418243.953:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.390444][ T28] audit: type=1326 audit(1772418243.953:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.426084][ T28] audit: type=1326 audit(1772418243.953:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.453518][T11461] loop6: detected capacity change from 0 to 128 [ 330.465030][ T28] audit: type=1326 audit(1772418243.953:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.493228][ T28] audit: type=1326 audit(1772418243.953:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.518067][ T28] audit: type=1326 audit(1772418243.953:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.563132][ T28] audit: type=1326 audit(1772418243.953:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.678397][ T28] audit: type=1326 audit(1772418243.953:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 330.731859][ T28] audit: type=1326 audit(1772418243.953:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.2.2243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 331.440973][T11481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 331.527641][T11481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.151472][T11493] netlink: 'syz.5.2255': attribute type 32 has an invalid length. [ 332.209308][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2255'. [ 332.344022][T11493] bond7: option coupled_control: invalid value (77) [ 332.354519][T11497] loop6: detected capacity change from 0 to 512 [ 332.416977][T11500] netlink: 64691 bytes leftover after parsing attributes in process `syz.6.2256'. [ 332.428345][T11493] bond7 (unregistering): Released all slaves [ 332.827581][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2267'. [ 332.881648][T11530] loop2: detected capacity change from 0 to 1764 [ 332.897469][T11527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 332.905368][T11525] dummy0: mtu less than device minimum [ 332.952092][T11531] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 333.044024][T11531] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 333.076139][T11531] bond2: (slave ipvlan2): Error -95 calling set_mac_address [ 333.250841][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'. [ 333.288545][T11542] vlan2: entered promiscuous mode [ 333.299172][T11542] gretap0: entered promiscuous mode [ 333.321308][T11550] SELinux: failed to load policy [ 333.517846][T11563] SELinux: Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped). [ 334.098595][T11583] loop6: detected capacity change from 0 to 512 [ 334.112400][T11583] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 334.142185][T11583] EXT4-fs (loop6): orphan cleanup on readonly fs [ 334.156584][T11583] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 334.192440][T11583] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 334.206785][T11583] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.2284: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 334.250834][T11583] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 334.251037][T11583] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2284: couldn't read orphan inode 13 (err -117) [ 334.260254][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 334.260273][ C1] EXT4-fs (loop6): last error at time 1772418247: ext4_ext_check_inode:521: inode 13 [ 334.332099][T11583] loop6: lost filesystem error report for type 5 error -117 [ 334.332741][T11583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.360632][T11568] delete_channel: no stack [ 334.474390][T11605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2292'. [ 334.626431][T11605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2292'. [ 334.712989][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.802601][T11614] netlink: 'syz.5.2293': attribute type 32 has an invalid length. [ 334.828702][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2293'. [ 334.936753][T11619] loop1: detected capacity change from 0 to 1764 [ 334.998692][T11614] bond7: option coupled_control: invalid value (77) [ 335.007644][T11614] bond7 (unregistering): Released all slaves [ 335.047580][T11624] netlink: 'syz.6.2294': attribute type 32 has an invalid length. [ 335.060302][ T3476] kernel read not supported for file /mdstat (pid: 3476 comm: kworker/1:7) [ 335.066035][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2294'. [ 335.088088][T11624] bond3: option coupled_control: invalid value (77) [ 335.096117][T11624] bond3 (unregistering): Released all slaves [ 335.233697][T11636] loop6: detected capacity change from 0 to 128 [ 337.485179][ T28] kauditd_printk_skb: 198 callbacks suppressed [ 337.485192][ T28] audit: type=1326 audit(1772418251.118:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 337.519423][T11655] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2305'. [ 337.659876][ T28] audit: type=1326 audit(1772418251.168:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 337.809860][T11660] loop2: detected capacity change from 0 to 128 [ 337.864200][ T28] audit: type=1326 audit(1772418251.178:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 337.909892][ T28] audit: type=1326 audit(1772418251.178:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 337.969193][ T28] audit: type=1326 audit(1772418251.178:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e4ae3cfce code=0x7ffc0000 [ 338.026919][ T28] audit: type=1326 audit(1772418251.178:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 338.081249][T11664] netlink: 'syz.7.2308': attribute type 32 has an invalid length. [ 338.089343][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2308'. [ 338.089490][ T28] audit: type=1326 audit(1772418251.178:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 338.126333][ T28] audit: type=1326 audit(1772418251.178:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e4ae3cfce code=0x7ffc0000 [ 338.138066][T11664] bond3: option coupled_control: invalid value (77) [ 338.158503][T11664] bond3 (unregistering): Released all slaves [ 338.169724][ T28] audit: type=1326 audit(1772418251.178:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e4ae3cfce code=0x7ffc0000 [ 338.194545][ T28] audit: type=1326 audit(1772418251.178:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11653 comm="syz.2.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ae7c799 code=0x7ffc0000 [ 338.344058][T11666] syzkaller0: entered promiscuous mode [ 338.361678][T11666] syzkaller0: entered allmulticast mode [ 338.388701][T11672] 9p: Bad value for 'rfdno' [ 338.817492][T11689] loop1: detected capacity change from 0 to 1024 [ 338.828871][T11689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 338.841688][T11689] System zones: 0-1, 3-36 [ 338.863436][T11689] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2313: bad orphan inode 134217728 [ 338.896838][T11689] loop1: lost filesystem error report for type 5 error -117 [ 338.897818][T11689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.274486][T11695] loop7: detected capacity change from 0 to 128 [ 339.817389][T11704] loop6: detected capacity change from 0 to 128 [ 339.912186][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.495515][T11711] netlink: 'syz.2.2329': attribute type 4 has an invalid length. [ 341.404867][T11732] loop1: detected capacity change from 0 to 128 [ 341.714672][T11734] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 341.725030][T11734] bond7 (unregistering): Released all slaves [ 341.773633][T11738] sctp: [Deprecated]: syz.5.2324 (pid 11738) Use of int in max_burst socket option. [ 341.773633][T11738] Use struct sctp_assoc_value instead [ 341.815875][T11087] bio_check_eod: 1 callbacks suppressed [ 341.815892][T11087] kworker/u8:10: attempt to access beyond end of device [ 341.815892][T11087] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 341.904584][T11739] loop2: detected capacity change from 0 to 512 [ 341.966238][T11739] ------------[ cut here ]------------ [ 341.972062][T11739] EA inode 11 i_nlink=2 [ 341.972217][T11739] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.2325/11739 [ 341.996592][T11739] Modules linked in: [ 342.000971][T11739] CPU: 1 UID: 0 PID: 11739 Comm: syz.2.2325 Not tainted syzkaller #0 PREEMPT(full) [ 342.011090][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.027561][T11739] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 342.034656][T11739] Code: 84 5a 99 ff 4c 8d 2d 8d ea 5d 05 49 8d 7e 40 e8 f4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df 44 dd 03 66 66 66 66 66 66 2e [ 342.061530][T11739] RSP: 0018:ffffc9000207b778 EFLAGS: 00010246 [ 342.068122][T11739] RAX: ffff88810e29cc78 RBX: ffff88811ac2d328 RCX: ffffffff81bffab8 [ 342.076950][T11739] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de530 [ 342.092128][T11739] RBP: 000000000000000b R08: 000188811ac2d2db R09: 0000000000000000 [ 342.100376][T11739] R10: ffffc9000207b6a8 R11: 0001c9000207b6a8 R12: ffff88811ac2d2d8 [ 342.109005][T11739] R13: ffffffff871de530 R14: ffff88811ac2d290 R15: 0000000000000001 [ 342.123856][T11739] FS: 00007f6e498ae6c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 342.133184][T11739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.140596][T11739] CR2: 0000000034747865 CR3: 000000012afd2000 CR4: 00000000003506f0 [ 342.155615][T11739] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 342.163869][T11739] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 342.172631][T11739] Call Trace: [ 342.176634][T11739] [ 342.180080][T11739] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 342.190599][T11739] ? errseq_check+0x2c/0x50 [ 342.195668][T11739] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 342.201625][T11739] ? ext4_truncate+0x92b/0xb00 [ 342.206789][T11739] ext4_evict_inode+0xa1f/0xd60 [ 342.212048][T11739] ? __pfx_ext4_evict_inode+0x10/0x10 [ 342.225039][T11739] evict+0x2af/0x510 [ 342.229140][T11739] ? __dquot_initialize+0x146/0x7c0 [ 342.234620][T11739] iput+0x41a/0x580 [ 342.239058][T11739] ext4_process_orphan+0x1a9/0x1c0 [ 342.244547][T11739] ext4_orphan_cleanup+0x6a8/0xa00 [ 342.250570][T11739] ext4_fill_super+0x3408/0x37c0 [ 342.263893][T11739] ? set_blocksize+0x14c/0x270 [ 342.269302][T11739] ? setup_bdev_super+0x30e/0x370 [ 342.274644][T11739] ? __pfx_ext4_fill_super+0x10/0x10 [ 342.280261][T11739] get_tree_bdev_flags+0x291/0x300 [ 342.292635][T11739] ? __pfx_ext4_fill_super+0x10/0x10 [ 342.298357][T11739] get_tree_bdev+0x1f/0x30 [ 342.302995][T11739] ext4_get_tree+0x1c/0x30 [ 342.307812][T11739] vfs_get_tree+0x57/0x1d0 [ 342.312543][T11739] do_new_mount+0x288/0x8d0 [ 342.324758][T11739] path_mount+0x4d0/0xbc0 [ 342.329514][T11739] __se_sys_mount+0x28c/0x2e0 [ 342.334754][T11739] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 342.341675][T11739] __x64_sys_mount+0x67/0x80 [ 342.354157][T11739] x64_sys_call+0x2d61/0x3020 [ 342.359489][T11739] do_syscall_64+0x12c/0x370 [ 342.364602][T11739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.370899][T11739] RIP: 0033:0x7f6e4ae7da0a [ 342.383102][T11739] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.403574][T11739] RSP: 002b:00007f6e498ade58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.419886][T11739] RAX: ffffffffffffffda RBX: 00007f6e498adee0 RCX: 00007f6e4ae7da0a [ 342.428329][T11739] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f6e498adea0 [ 342.436456][T11739] RBP: 00002000000009c0 R08: 00007f6e498adee0 R09: 0000000000800718 [ 342.445044][T11739] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 342.460359][T11739] R13: 00007f6e498adea0 R14: 000000000000048d R15: 0000200000000200 [ 342.468697][T11739] [ 342.472200][T11739] ---[ end trace 0000000000000000 ]--- [ 342.521471][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 342.521486][ T28] audit: type=1400 audit(1772418256.148:7172): avc: denied { create } for pid=11750 comm="syz.1.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 342.533978][T11739] EXT4-fs (loop2): 1 orphan inode deleted [ 342.567875][T11753] netlink: 'syz.7.2331': attribute type 4 has an invalid length. [ 342.595531][ T28] audit: type=1400 audit(1772418256.208:7173): avc: denied { mount } for pid=11752 comm="syz.7.2331" name="/" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 342.609510][T11739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.691470][ T28] audit: type=1400 audit(1772418256.218:7174): avc: denied { search } for pid=11752 comm="syz.7.2331" name="/" dev="configfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.732504][ T28] audit: type=1400 audit(1772418256.288:7175): avc: denied { mount } for pid=11736 comm="syz.2.2325" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 342.763127][ T28] audit: type=1400 audit(1772418256.288:7176): avc: denied { read } for pid=11750 comm="syz.1.2330" dev="nsfs" ino=4026532624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 342.794849][T11765] loop1: detected capacity change from 0 to 128 [ 342.895211][ T28] audit: type=1400 audit(1772418256.288:7177): avc: denied { open } for pid=11750 comm="syz.1.2330" path="net:[4026532624]" dev="nsfs" ino=4026532624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 342.920762][ T28] audit: type=1400 audit(1772418256.308:7179): avc: denied { create } for pid=11756 comm="syz.7.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.940917][T11768] netlink: 'syz.5.2336': attribute type 32 has an invalid length. [ 342.976199][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2336'. [ 343.006266][ T28] audit: type=1400 audit(1772418256.308:7178): avc: denied { create } for pid=11750 comm="syz.1.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 343.046334][ T28] audit: type=1400 audit(1772418256.358:7180): avc: denied { create } for pid=11756 comm="syz.7.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 343.109756][T11768] bond7: option coupled_control: invalid value (77) [ 343.121249][ T28] audit: type=1400 audit(1772418256.418:7181): avc: denied { create } for pid=11762 comm="syz.5.2335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.281177][T11768] bond7 (unregistering): Released all slaves [ 343.488004][T11780] 9p: Bad value for 'rfdno' [ 343.731839][T11784] loop6: detected capacity change from 0 to 128 [ 343.741601][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.848958][T11788] loop7: detected capacity change from 0 to 512 [ 343.934366][T11788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.948179][T11788] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.050443][ T9961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.068382][ T30] kworker/u8:1: attempt to access beyond end of device [ 345.068382][ T30] loop6: rw=1, sector=145, nr_sectors = 896 limit=128 [ 345.155272][T11804] loop6: detected capacity change from 0 to 128 [ 345.248610][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 345.310759][T11808] bond8: option lacp_active: invalid value (5) [ 345.327444][T11808] bond8 (unregistering): Released all slaves [ 345.474477][T11821] netlink: 'syz.7.2350': attribute type 32 has an invalid length. [ 345.570718][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2350'. [ 345.951094][T11821] bond3: option coupled_control: invalid value (77) [ 346.010571][T11827] 9p: Bad value for 'rfdno' [ 346.019120][T11821] bond3 (unregistering): Released all slaves [ 346.414800][T11837] loop2: detected capacity change from 0 to 1764 [ 346.759018][T11839] loop7: detected capacity change from 0 to 128 [ 347.130202][T11833] syz.5.2355 (11833) used greatest stack depth: 5528 bytes left [ 347.798903][ T1651] kworker/u8:7: attempt to access beyond end of device [ 347.798903][ T1651] loop7: rw=1, sector=145, nr_sectors = 896 limit=128 [ 347.851749][T11859] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2363'. [ 347.882079][T11855] netlink: 'syz.2.2362': attribute type 32 has an invalid length. [ 347.889949][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2362'. [ 347.913146][T11855] bond0: option coupled_control: invalid value (64) [ 347.965554][T11857] loop1: detected capacity change from 0 to 1024 [ 348.005658][T11855] bond0 (unregistering): Released all slaves [ 348.027530][T11857] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 348.037532][T11857] System zones: 0-1, 3-36 [ 348.057137][T11857] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2364: bad orphan inode 134217728 [ 348.068477][T11857] loop1: lost filesystem error report for type 5 error -117 [ 348.091496][T11857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.168644][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 348.168660][ T28] audit: type=1400 audit(1772418261.758:7310): avc: denied { create } for pid=11864 comm="syz.5.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.195061][ T28] audit: type=1400 audit(1772418261.758:7311): avc: denied { setopt } for pid=11864 comm="syz.5.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.229292][ T28] audit: type=1400 audit(1772418261.778:7312): avc: denied { ioctl } for pid=11864 comm="syz.5.2366" path="socket:[35347]" dev="sockfs" ino=35347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.262818][T11874] syzkaller0: entered promiscuous mode [ 348.266364][ T28] audit: type=1400 audit(1772418261.788:7313): avc: denied { bind } for pid=11864 comm="syz.5.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 348.268469][T11874] syzkaller0: entered allmulticast mode [ 348.291953][ T28] audit: type=1400 audit(1772418261.788:7314): avc: denied { mounton } for pid=11864 comm="syz.5.2366" path="/480/file0" dev="tmpfs" ino=2603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 348.316743][ T28] audit: type=1400 audit(1772418261.838:7315): avc: denied { add_name } for pid=11856 comm="syz.1.2364" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.346901][ T28] audit: type=1400 audit(1772418261.878:7316): avc: denied { create } for pid=11856 comm="syz.1.2364" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 348.356558][T11869] netlink: 'syz.2.2368': attribute type 4 has an invalid length. [ 348.368223][ T28] audit: type=1400 audit(1772418261.878:7317): avc: denied { ioctl } for pid=11870 comm="syz.7.2369" path="socket:[35357]" dev="sockfs" ino=35357 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.447506][ T28] audit: type=1400 audit(1772418261.938:7318): avc: denied { write } for pid=11870 comm="syz.7.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 348.468491][ T28] audit: type=1400 audit(1772418262.068:7319): avc: denied { read open } for pid=11856 comm="syz.1.2364" path="/467/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 348.564862][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2376'. [ 348.566156][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.603925][T11889] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2377'. [ 348.623540][T11884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.638450][T11886] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 348.680139][T11884] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 348.693783][T11884] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 348.705517][T11884] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 348.767869][T11893] netlink: 'syz.1.2374': attribute type 32 has an invalid length. [ 348.778709][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 348.837232][T11893] bond6: option coupled_control: invalid value (77) [ 348.844763][T11893] bond6 (unregistering): Released all slaves [ 348.921521][T11904] netlink: 'syz.7.2379': attribute type 32 has an invalid length. [ 348.966084][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2379'. [ 348.997971][T11913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58640 sclass=netlink_route_socket pid=11913 comm=syz.1.2383 [ 349.028326][T11904] bond3: option coupled_control: invalid value (64) [ 349.099596][T11921] netlink: 'syz.2.2384': attribute type 4 has an invalid length. [ 349.128236][T11904] bond3 (unregistering): Released all slaves [ 349.254269][T11920] loop1: detected capacity change from 0 to 1024 [ 349.259526][T11931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2389'. [ 349.309276][T11920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 349.318877][T11920] System zones: 0-1, 3-36 [ 349.331146][T11920] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2385: bad orphan inode 134217728 [ 349.342475][T11920] loop1: lost filesystem error report for type 5 error -117 [ 349.349780][T11920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.449615][T11934] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 349.592689][T11940] loop2: detected capacity change from 0 to 1024 [ 349.613459][T11940] EXT4-fs: Ignoring removed orlov option [ 349.632249][T11940] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 349.654499][T11940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.682696][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.732482][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 349.798596][T11945] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.816771][T11949] vlan6: entered promiscuous mode [ 349.824321][T11949] bond8: entered promiscuous mode [ 349.843706][T11950] netlink: 'syz.6.2395': attribute type 32 has an invalid length. [ 349.854084][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2395'. [ 349.903775][T11950] bond4: option coupled_control: invalid value (77) [ 349.920811][T11950] bond4 (unregistering): Released all slaves [ 349.952209][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.964549][T11956] netlink: 'syz.2.2397': attribute type 4 has an invalid length. [ 349.990902][T11954] netlink: 'syz.5.2398': attribute type 32 has an invalid length. [ 350.061687][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2398'. [ 350.105366][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'. [ 350.117472][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'. [ 350.143792][T11954] bond0: option coupled_control: invalid value (64) [ 350.247749][T11973] loop1: detected capacity change from 0 to 512 [ 350.257670][T11973] EXT4-fs: dax option not supported [ 350.276759][T11954] bond0 (unregistering): Released all slaves [ 350.323151][T11974] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 350.360831][T11980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.405938][T11983] vlan2: entered promiscuous mode [ 350.424444][T11983] bond6: entered promiscuous mode [ 350.477025][T11978] loop7: detected capacity change from 0 to 1024 [ 350.501628][T11989] netlink: 'syz.5.2410': attribute type 4 has an invalid length. [ 350.600835][T12000] netlink: 'syz.5.2411': attribute type 1 has an invalid length. [ 350.629023][T11978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 350.629264][T12000] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.653030][T11978] System zones: 0-1, 3-36 [ 350.665630][T11992] bond7: (slave veth3): Enslaving as an active interface with a down link [ 350.674980][T11978] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2407: bad orphan inode 134217728 [ 350.675720][T12006] loop2: detected capacity change from 0 to 128 [ 350.702599][T11978] loop7: lost filesystem error report for type 5 error -117 [ 350.709303][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 350.723054][ C1] EXT4-fs (loop7): initial error at time 1772418264: ext4_orphan_get:1417 [ 350.731579][ C1] EXT4-fs (loop7): last error at time 1772418264: ext4_orphan_get:1417 [ 350.760577][T11978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.840846][T12004] bond7: option coupled_control: invalid value (64) [ 350.848848][T12004] bond7 (unregistering): Released all slaves [ 351.934445][ T9961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.137640][T12035] loop1: detected capacity change from 0 to 1024 [ 352.180968][T12035] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 352.222963][T12035] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 352.237596][T12035] EXT4-fs (loop1): orphan cleanup on readonly fs [ 352.244616][T12035] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 352.262979][T12035] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 352.273513][T12035] EXT4-fs (loop1): 1 truncate cleaned up [ 352.283396][T12035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.300218][T12035] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.2419: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 352.341102][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.442389][T12043] 8021q: adding VLAN 0 to HW filter on device bond7 [ 352.479529][T12043] vlan3: entered promiscuous mode [ 352.484713][T12043] bond7: entered promiscuous mode [ 352.603697][T12055] syzkaller0: entered promiscuous mode [ 352.609185][T12055] syzkaller0: entered allmulticast mode [ 352.678540][T12060] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 352.775763][T12061] bond3: option coupled_control: invalid value (64) [ 352.889078][T12061] bond3 (unregistering): Released all slaves [ 353.114445][T12077] loop7: detected capacity change from 0 to 128 [ 353.255088][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 353.255111][ T28] audit: type=1400 audit(1772418266.750:7357): avc: denied { execmem } for pid=12075 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 353.280684][ T28] audit: type=1400 audit(1772418266.840:7358): avc: denied { create } for pid=12065 comm="syz.5.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 353.368820][ T28] audit: type=1400 audit(1772418266.980:7359): avc: denied { create } for pid=12080 comm="syz.2.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 353.401632][T12081] 8021q: adding VLAN 0 to HW filter on device bond9 [ 353.419512][T12081] vlan7: entered promiscuous mode [ 353.427398][ T28] audit: type=1400 audit(1772418266.980:7360): avc: denied { write } for pid=12080 comm="syz.2.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 353.450759][T12081] bond9: entered promiscuous mode [ 353.487965][ T28] audit: type=1400 audit(1772418267.090:7361): avc: denied { read } for pid=12075 comm="syz.7.2434" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 353.490348][T12088] validate_nla: 3 callbacks suppressed [ 353.490406][T12088] netlink: 'syz.6.2437': attribute type 4 has an invalid length. [ 353.530600][ T28] audit: type=1400 audit(1772418267.120:7362): avc: denied { create } for pid=12085 comm="syz.2.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 353.553702][ T28] audit: type=1400 audit(1772418267.130:7363): avc: denied { setopt } for pid=12085 comm="syz.2.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 353.576079][ T28] audit: type=1400 audit(1772418267.140:7364): avc: denied { open } for pid=12075 comm="syz.7.2434" path="net:[4026532890]" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 353.617087][ T28] audit: type=1400 audit(1772418267.140:7365): avc: denied { create } for pid=12075 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 353.688396][ T28] audit: type=1400 audit(1772418267.200:7366): avc: denied { map_create } for pid=12075 comm="syz.7.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 353.741694][T12094] netlink: 'syz.6.2439': attribute type 32 has an invalid length. [ 353.765477][T12094] __nla_validate_parse: 12 callbacks suppressed [ 353.765490][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2439'. [ 353.815551][T12094] bond4: option coupled_control: invalid value (77) [ 353.823285][T12094] bond4 (unregistering): Released all slaves [ 353.844148][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2442'. [ 353.983211][T12099] 8021q: adding VLAN 0 to HW filter on device bond8 [ 354.032971][T12103] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 354.070108][T12103] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 354.086159][T12103] bond8: (slave ipvlan3): Error -95 calling set_mac_address [ 354.175834][T12110] netlink: 'syz.1.2445': attribute type 32 has an invalid length. [ 354.205660][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'. [ 354.281359][T12110] bond8: option coupled_control: invalid value (64) [ 354.307033][T12110] bond8 (unregistering): Released all slaves [ 354.467480][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2449'. [ 354.497540][T12122] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.561173][T12124] vlan3: entered promiscuous mode [ 354.574582][T12124] bond4: entered promiscuous mode [ 354.603681][T12126] netlink: 'syz.1.2450': attribute type 4 has an invalid length. [ 354.888261][T12132] loop6: detected capacity change from 0 to 128 [ 354.992248][T12130] loop1: detected capacity change from 0 to 1024 [ 355.073145][T12130] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 355.082274][T12130] System zones: 0-1, 3-36 [ 355.201655][T12130] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2452: bad orphan inode 134217728 [ 355.214747][T12130] loop1: lost filesystem error report for type 5 error -117 [ 355.226252][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 355.240009][ C1] EXT4-fs (loop1): initial error at time 1772418268: ext4_orphan_get:1417 [ 355.248548][ C1] EXT4-fs (loop1): last error at time 1772418268: ext4_orphan_get:1417 [ 355.389656][T12130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.254136][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.705458][T12156] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2460'. [ 356.735704][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2459'. [ 356.763658][T12155] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.786116][T12155] bond10: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.796081][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2462'. [ 356.807835][T12155] bond10: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 356.819141][T12155] bond10: (slave ipvlan4): Error -95 calling set_mac_address [ 356.832110][T12164] netlink: 'syz.1.2463': attribute type 4 has an invalid length. [ 356.862733][T12165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.896291][T12171] vlan4: entered promiscuous mode [ 356.945374][T12171] bond5: entered promiscuous mode [ 356.982734][T12173] syzkaller0: entered promiscuous mode [ 356.988306][T12173] syzkaller0: entered allmulticast mode [ 357.107106][T12184] loop6: detected capacity change from 0 to 512 [ 357.122085][T12184] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 357.147761][T12184] EXT4-fs (loop6): 1 truncate cleaned up [ 357.154056][T12184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.304438][T12193] loop1: detected capacity change from 0 to 128 [ 357.424181][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.497294][T12199] loop6: detected capacity change from 0 to 128 [ 357.810542][T12204] netlink: 'syz.5.2474': attribute type 4 has an invalid length. [ 358.507217][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 358.507233][ T28] audit: type=1400 audit(1772418272.113:7504): avc: denied { setopt } for pid=12211 comm="syz.2.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.522184][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2477'. [ 358.557571][ T28] audit: type=1400 audit(1772418272.113:7505): avc: denied { bind } for pid=12211 comm="syz.2.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.602920][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2482'. [ 358.611279][ T28] audit: type=1400 audit(1772418272.123:7506): avc: denied { create } for pid=12214 comm="syz.7.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 358.637892][T12215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.642421][ T28] audit: type=1400 audit(1772418272.123:7507): avc: denied { write } for pid=12214 comm="syz.7.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 358.672838][T12221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 358.689931][ T28] audit: type=1400 audit(1772418272.142:7508): avc: denied { name_bind } for pid=12211 comm="syz.2.2478" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 358.757580][ T28] audit: type=1400 audit(1772418272.142:7509): avc: denied { node_bind } for pid=12211 comm="syz.2.2478" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 358.778614][ T28] audit: type=1400 audit(1772418272.152:7510): avc: denied { write } for pid=12211 comm="syz.2.2478" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.811604][ T28] audit: type=1400 audit(1772418272.152:7511): avc: denied { connect } for pid=12211 comm="syz.2.2478" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.844794][T12215] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 358.865967][ T28] audit: type=1400 audit(1772418272.152:7512): avc: denied { name_connect } for pid=12211 comm="syz.2.2478" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 358.891591][T12215] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 358.921621][ T28] audit: type=1400 audit(1772418272.152:7513): avc: denied { ioctl } for pid=12211 comm="syz.2.2478" path="socket:[36522]" dev="sockfs" ino=36522 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.952201][T12215] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 359.145162][T12242] netlink: 'syz.5.2485': attribute type 4 has an invalid length. [ 359.200643][T12247] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2487'. [ 359.260000][T12249] loop7: detected capacity change from 0 to 512 [ 359.802409][T12257] loop7: detected capacity change from 0 to 1024 [ 359.817369][T12257] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.862142][T12259] loop2: detected capacity change from 0 to 1024 [ 359.888307][T12257] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 359.893276][T12259] EXT4-fs: inline encryption not supported [ 359.916723][T12257] EXT4-fs (loop7): orphan cleanup on readonly fs [ 359.937392][T12257] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 359.983080][T12257] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 359.990850][T12257] EXT4-fs (loop7): 1 truncate cleaned up [ 359.997021][T12259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.011299][T12257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 360.075672][T12257] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.2491: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 360.117414][T12259] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 360.163145][ T9961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.174154][T12259] EXT4-fs (loop2): Remounting filesystem read-only [ 360.222392][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.232555][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2493'. [ 360.248391][T12266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.269796][T12266] vlan3: entered promiscuous mode [ 360.274936][T12266] bond4: entered promiscuous mode [ 360.521139][T12275] netlink: 'syz.7.2496': attribute type 4 has an invalid length. [ 360.680629][T12272] loop2: detected capacity change from 0 to 1024 [ 360.738059][T12272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 360.750897][T12272] System zones: 0-1, 3-36 [ 360.768946][T12272] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2494: bad orphan inode 134217728 [ 360.782361][T12272] loop2: lost filesystem error report for type 5 error -117 [ 360.784171][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 360.797914][ C0] EXT4-fs (loop2): initial error at time 1772418274: ext4_orphan_get:1417 [ 360.806440][ C0] EXT4-fs (loop2): last error at time 1772418274: ext4_orphan_get:1417 [ 360.821338][T12272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.027460][T12285] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 361.588333][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.705365][T12299] loop6: detected capacity change from 0 to 512 [ 361.737431][T12304] netlink: 'syz.2.2508': attribute type 4 has an invalid length. [ 361.783123][T12299] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 361.812289][T12299] EXT4-fs (loop6): mount failed [ 361.818064][T12313] loop7: detected capacity change from 0 to 128 [ 362.191329][T12322] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 362.802563][T12336] netlink: 'syz.6.2519': attribute type 4 has an invalid length. [ 362.945561][T12338] loop6: detected capacity change from 0 to 4096 [ 362.954097][T12338] EXT4-fs: Ignoring removed bh option [ 362.961058][T12314] ================================================================== [ 362.967824][T12342] netlink: 'syz.1.2522': attribute type 46 has an invalid length. [ 362.969141][T12314] BUG: KCSAN: data-race in _copy_to_iter / copy_folio_from_iter_atomic [ 362.985151][T12314] [ 362.987477][T12314] read to 0xffff88811d28b0ff of 1 bytes by task 12316 on cpu 0: [ 362.995102][T12314] _copy_to_iter+0x602/0xea0 [ 362.999708][T12314] copy_page_to_iter+0x18f/0x2d0 [ 363.004656][T12314] shmem_file_read_iter+0x2d6/0x540 [ 363.009862][T12314] copy_splice_read+0x471/0x6c0 [ 363.014713][T12314] splice_direct_to_actor+0x28f/0x670 [ 363.020119][T12314] do_splice_direct+0x119/0x1a0 [ 363.024961][T12314] do_sendfile+0x382/0x650 [ 363.029365][T12314] __x64_sys_sendfile64+0x105/0x150 [ 363.034550][T12314] x64_sys_call+0x2dc4/0x3020 [ 363.039220][T12314] do_syscall_64+0x12c/0x370 [ 363.043797][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.049680][T12314] [ 363.051988][T12314] write to 0xffff88811d28b0ec of 21 bytes by task 12314 on cpu 1: [ 363.059774][T12314] copy_folio_from_iter_atomic+0x75f/0x1170 [ 363.065669][T12314] generic_perform_write+0x2c1/0x490 [ 363.070955][T12314] shmem_file_write_iter+0xc5/0xf0 [ 363.076065][T12314] iter_file_splice_write+0x6c4/0xa80 [ 363.081434][T12314] direct_splice_actor+0x156/0x2a0 [ 363.086548][T12314] splice_direct_to_actor+0x311/0x670 [ 363.091905][T12314] do_splice_direct+0x119/0x1a0 [ 363.096743][T12314] do_sendfile+0x382/0x650 [ 363.101159][T12314] __x64_sys_sendfile64+0x105/0x150 [ 363.106349][T12314] x64_sys_call+0x2dc4/0x3020 [ 363.111023][T12314] do_syscall_64+0x12c/0x370 [ 363.115602][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.121483][T12314] [ 363.123791][T12314] Reported by Kernel Concurrency Sanitizer on: [ 363.129925][T12314] CPU: 1 UID: 0 PID: 12314 Comm: syz.5.2511 Tainted: G W syzkaller #0 PREEMPT(full) [ 363.140846][T12314] Tainted: [W]=WARN [ 363.144631][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.154669][T12314] ================================================================== [ 363.211928][T12338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.710703][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 363.710728][ T28] audit: type=1400 audit(1772418277.305:7614): avc: denied { unmount } for pid=8765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 363.711857][ T8765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.076665][ T28] audit: type=1400 audit(1772418277.665:7615): avc: denied { unmount } for pid=9961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 372.550969][ T28] audit: type=1400 audit(1772418286.135:7616): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 372.576049][ T28] audit: type=1400 audit(1772418286.135:7617): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1