last executing test programs: 3m31.315207065s ago: executing program 32 (id=60): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b14c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m22.077659297s ago: executing program 33 (id=189): r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x739c7734}, 0x8) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf251700000068000180080003000100000014000200636169663000000000000000000000000800030000000000080003000200000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100b2c2e3d8edfbe43827950f4047cc5c81d1b560261ee2a6fb069ef0a5b4a522b0d50e5f9a00737ebdf03223d2fff0a6d5adc9a9fa9678777cde82c10073e4d242e32b08f51a92a09ecd182401e99f06924fa7888cf306c595", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e0000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="24000180", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000002c000180", @ANYRES32], 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={r4, 0x4a, "db9e87284c666dd17cb55274cf59c3e7986e63ef9cd316cc7b6dfa786bf380906144c6e0514964fb24d357b106179b371fc92fc3113f4a0d7ce3de2a68a0efaadbbf939a801a6d30c7cf"}, &(0x7f0000000240)=0x52) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x800) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x55, 0x5, 0x8, 0x81, 0x0, 0x0, 0xc9442, 0x9ab209a61a8b2b91, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={&(0x7f0000000600), 0xd}, 0x10, 0x5, 0xffffff01, 0x1, 0xfff, 0xdf14, 0x0, 0x0, 0xce, 0x0, 0xfffffffffffffffe}, 0x0, 0x5, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r6 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x44, r9, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x31}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004845}, 0x4000080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0x18, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x4000000) fstat(r6, &(0x7f0000000800)) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r6, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 3m14.645624952s ago: executing program 6 (id=281): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_io_uring_setup(0x250a, &(0x7f0000000440)={0x0, 0xd2c7, 0x8, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) unshare(0x22020400) pselect6(0x40, &(0x7f00000026c0)={0x1, 0x1, 0x1ff, 0xfffffffffffffff8, 0x40, 0x8, 0x2, 0x8}, &(0x7f0000002700)={0x6, 0x1, 0x0, 0x101, 0x1, 0xfffffffffffffffa, 0x0, 0x2}, &(0x7f0000002740)={0xd, 0x10001, 0x5, 0x0, 0x4, 0x3, 0x7, 0x9}, 0x0, 0x0) 3m14.527043252s ago: executing program 6 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x4005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000020acf81d02400001020301650224000101fe400309040004020301030c0921080008012225070905810340000f0340"], 0x0) setxattr$security_selinux(0x0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:hald_acl_exec_t:s0\x00', 0x25, 0x3) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r3, &(0x7f0000000400)='ns\x00') r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback, r5}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000b80)=ANY=[@ANYBLOB="e00000027f0000030000000001000000e000000165f8b61cd4bec817a78f3f1750a07ee0dd0200d298a326440ffeb1f91067fd73381073784d1db9460d384c483fd5d0cfb32b56e6b8c457bbe100000000000000"], 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=@getchain={0x2c, 0x11, 0x1, 0x400000, 0x2000001, {0x0, 0x0, 0x0, r5, {0x2}, {0xd, 0xfff2}, {0xd}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa055}, 0x20008014) 3m11.312320881s ago: executing program 6 (id=329): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_io_uring_setup(0x250a, &(0x7f0000000440)={0x0, 0xd2c7, 0x8, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) unshare(0x22020400) pselect6(0x40, &(0x7f00000026c0)={0x1, 0x1, 0x1ff, 0xfffffffffffffff8, 0x40, 0x8, 0x2, 0x8}, &(0x7f0000002700)={0x6, 0x1, 0x0, 0x101, 0x1, 0xfffffffffffffffa, 0x0, 0x2}, &(0x7f0000002740)={0xd, 0x10001, 0x5, 0x0, 0x4, 0x3, 0x7, 0x9}, 0x0, 0x0) 3m11.155814125s ago: executing program 6 (id=331): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r1 = openat(r0, 0x0, 0x4c142, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) link(&(0x7f0000000000)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000040000900020073797a3100000000050004000000000005000100070000000900020073797a32000000000c"], 0x54}}, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) sendfile(r1, r1, 0x0, 0xe3aa6ea) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1008700, &(0x7f00000000c0)="a9051b00950af0adf123fcfbc47995150455066c13c6187e394a60", 0x1b, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000100)="64e326f10ddfb424de2cee7d6d51144d5dc1b857b51c00dce7c1f1ef13e43695e9cd567611c1c1b981238d617af8e2dc025eb38922b8156e3e886cc7e74053bed47033e8c2a54802f9f0ef071519fa791a5a855322dde6fbc20629d398a532bda9ca175390fbe496d4d254062ee1c31b8dfea6c7bf919e6770f56c0e7fefa44b11be265d01d2ea708af5cf9db4902eba6b6cbd7e926bcd9990e0d117a603f3d55513e9017ded3bd8e3218aad91a1b5ac36419232bfce147eda2b733dbbce6c73172a8c6bd21133bc5b17609605cc4494513439ae303003acaa3d04f2b87217432e1764632b39f5e03831f3f9dfa18b81fee85bce2347b59b") ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)) 3m10.606127003s ago: executing program 6 (id=336): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x109342, 0x0) fallocate(r0, 0x0, 0x800, 0x8000c62) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) fallocate(r1, 0x8, 0x0, 0x8000) 3m10.341343375s ago: executing program 6 (id=341): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) (async) unshare(0x22020600) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0320000000000000240012800b000100697036746e6c000014000280060010000600000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0320000000000000240012800b000100697036746e6c000014000280060010000600000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7faa000000000000711012000000000095", @ANYBLOB="e0bcd79b9f26b775fbffec8230f116e6d73a5f8e5022d3ecf991ecc5aaff5a6b5e1c1c3bcddf96cb3e779078faa2dbed4d112fbd085d3bcc9b17866fcdade0c477e6ebd571b5af9e529a6b87c8c372d82a998664072ac4ce58c4efde84acac0b977cc7cb1f5b727fa44cd913009064ae1efea21877e8085afaa0523dcae7599f997f9019050715b89c4d223c1966d3d6c2d9ce225fa85cab559bc860fc4e2c5e17c6002e6451c5fe44f813fe7c", @ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000000480)='syzkaller\x00', 0xa}, 0x94) 3m10.322171987s ago: executing program 34 (id=341): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) (async) unshare(0x22020600) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0320000000000000240012800b000100697036746e6c000014000280060010000600000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0320000000000000240012800b000100697036746e6c000014000280060010000600000008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7faa000000000000711012000000000095", @ANYBLOB="e0bcd79b9f26b775fbffec8230f116e6d73a5f8e5022d3ecf991ecc5aaff5a6b5e1c1c3bcddf96cb3e779078faa2dbed4d112fbd085d3bcc9b17866fcdade0c477e6ebd571b5af9e529a6b87c8c372d82a998664072ac4ce58c4efde84acac0b977cc7cb1f5b727fa44cd913009064ae1efea21877e8085afaa0523dcae7599f997f9019050715b89c4d223c1966d3d6c2d9ce225fa85cab559bc860fc4e2c5e17c6002e6451c5fe44f813fe7c", @ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000000480)='syzkaller\x00', 0xa}, 0x94) 3m8.537441852s ago: executing program 4 (id=365): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @mcast1, 0x2}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) unshare(0x22020400) pselect6(0x40, &(0x7f00000026c0)={0x1, 0x1, 0x1ff, 0xfffffffffffffff8, 0x40, 0x8, 0x2, 0x8}, &(0x7f0000002700)={0x6, 0x1, 0x0, 0x101, 0x1, 0xfffffffffffffffa, 0x0, 0x2}, &(0x7f0000002740)={0xd, 0x10001, 0x5, 0x0, 0x4, 0x3, 0x7, 0x9}, 0x0, 0x0) 3m8.476425767s ago: executing program 4 (id=366): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nolazytime}, {@lazytime}, {@sysvgroups}, {@norecovery}, {@usrjquota}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000001b40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x14, 0x6, 0x2, 0x401, 0x70bd27, 0x25dfdbfd, {0xe, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x400c800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5800}], 0x14, 0x78f2, 0x0, 0x3) 3m8.307348542s ago: executing program 4 (id=369): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x9081e, &(0x7f0000000240)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nogrpid}, {@user_xattr}], [{@smackfshat={'smackfshat', 0x3d, 'appraise'}}]}, 0x1, 0x508, &(0x7f0000000c00)="$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") fchdir(r0) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m8.042919255s ago: executing program 4 (id=374): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r1 = openat(r0, 0x0, 0x4c142, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) link(&(0x7f0000000000)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000040000900020073797a3100000000050004000000000005000100070000000900020073797a32000000000c"], 0x54}}, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) sendfile(r1, r1, 0x0, 0xe3aa6ea) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1008700, &(0x7f00000000c0)="a9051b00950af0adf123fcfbc47995150455066c13c6187e394a609a", 0x1c, 0x0, &(0x7f0000000040), &(0x7f0000000100)="64e326f10ddfb424de2cee7d6d51144d5dc1b857b51c00dce7c1f1ef13e43695e9cd567611c1c1b981238d617af8e2dc025eb38922b8156e3e886cc7e74053bed47033e8c2a54802f9f0ef071519fa791a5a855322dde6fbc20629d398a532bda9ca175390fbe496d4d254062ee1c31b8dfea6c7bf919e6770f56c0e7fefa44b11be265d01d2ea708af5cf9db4902eba6b6cbd7e926bcd9990e0d117a603f3d55513e9017ded3bd8e3218aad91a1b5ac36419232bfce147eda2b733dbbce6c73172a8c6bd21133bc5b17609605cc4494513439ae303003acaa3d04f2b87217432e1764632b39f5e03831f3f9dfa18b81fee85bce2347b59b") ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)) 3m7.487381673s ago: executing program 4 (id=376): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x3]}]}, 0x70}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000000400)={0x0, 0x1, {0x1, @usage=0x10001, 0x0, 0x3, 0x0, 0x3, 0x9, 0xffffffffffffffff, 0x480, @struct={0xbddb, 0x8}, 0x8000, 0xfffffffc, [0x2, 0x0, 0x0, 0x4, 0x3, 0xfffffffffffffff7]}, {0x7, @usage=0xbd14, 0x0, 0x2, 0x7, 0x3, 0x3, 0x5, 0x18, @struct={0x0, 0x2}, 0x9, 0xfff, [0x2, 0x2e6a, 0x8d5, 0x57e, 0x40, 0x8]}, {0x9, @usage=0x6, 0x0, 0xffffffffffffffff, 0x8, 0x10, 0xf73, 0x2, 0x80, @struct={0x1a79, 0x8}, 0xfd7, 0xfffffffa, [0xe, 0x4, 0x0, 0x5, 0x2b, 0x8]}, {0xf, 0x8001, 0xfffffffffffffffe}}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r6) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x58, r12, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xb3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4854}, 0x50) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000000800)={0x1, 0x1, {0x3, @usage=0x8001, 0x0, 0x3, 0x3, 0x200, 0x0, 0x8, 0x401, @usage=0x7f, 0x9, 0x2, [0x77, 0x3, 0x2, 0x8000000000000000, 0x2, 0x7]}, {0x9, @usage=0x4, 0x0, 0x0, 0x6, 0x0, 0xff, 0x7, 0x84, @struct={0x101, 0x5b0b}, 0x4, 0x0, [0x92a, 0x2, 0x0, 0xa, 0xfffffffffffffff7, 0x800]}, {0x8001, @struct={0x5, 0x2}, 0x0, 0x2, 0x100000000, 0x5, 0x4, 0xffffffff, 0x40b, @usage=0x7fff, 0x9, 0x2, [0x52, 0xfffffffffffff215, 0xffffffff00000000, 0xc6f, 0x6, 0x590]}, {0x7c838715, 0x3, 0x2}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000c00)={0x0, 0x5, 0x0, [0x5, 0x5, 0x8000, 0x4484fd82, 0x6], [0x6, 0x4, 0xd940, 0x1800000000000, 0x7, 0x4, 0x8000000000000001, 0x7fff, 0x2, 0x4, 0xe89c, 0x9f, 0x0, 0x10001, 0x9, 0x7, 0x6, 0x4, 0x6cd5, 0x0, 0x3, 0x9029, 0x3, 0x9, 0xffffffffffffff01, 0x7, 0x101, 0x5, 0x128, 0x6, 0x8, 0x7, 0xf, 0x7, 0x4, 0x100000000, 0xd, 0x6, 0x1000, 0x1, 0x6, 0x1, 0x63b, 0x62a8, 0xa87, 0x4c, 0x5, 0x9, 0x80000, 0xae, 0x9, 0x9, 0x200, 0x9, 0x0, 0x7ff, 0x4, 0x100000000, 0x2, 0x5d, 0x9, 0x34, 0x4, 0xc5f, 0x7, 0x1, 0x10001, 0x80000000, 0x3, 0x7b15, 0x7, 0x7f, 0x6, 0x22a, 0x0, 0xfffffffffffff8c6, 0x2, 0x2, 0x6, 0x5, 0x3, 0x7, 0x3, 0x0, 0x3, 0x100000001, 0xc, 0x7, 0x9, 0xffffffff, 0xfffffffffffff914, 0x5, 0x68c, 0x5, 0x7, 0x0, 0x5, 0x2, 0xb296, 0x9, 0x101, 0x7, 0x6, 0x78918000, 0x78, 0xfffffffffffffff7, 0x7, 0xfff, 0x5, 0x6, 0xfffffffffffffffe, 0x4, 0x3, 0x69a, 0x6, 0x7, 0x6, 0x1, 0xbd, 0xec7e, 0x400]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000010c0)={0xd, 0x1, {0x0, @struct={0x401}, r11, 0x6, 0x200, 0x5, 0x7, 0x1, 0x0, @usage=0x7, 0x6, 0x671, [0x71, 0x12, 0x134, 0xb7b8, 0x7fffffff, 0x9be]}, {0x0, @usage=0x7, r13, 0x8a2, 0x9, 0xfffffffffffff001, 0x400, 0x58, 0x477, @struct={0x9, 0x8}, 0x24d, 0x1ff, [0x7ff, 0x8, 0x6, 0x1, 0x8, 0x8]}, {0x1, @struct={0xf92c, 0xe}, r14, 0x5, 0xfffffffeffffffff, 0x58, 0x7, 0x2, 0x10, @struct={0x5, 0x8}, 0x1, 0x6, [0x1, 0x7f, 0x40, 0x3087, 0xffffffffffffffff, 0x1]}, {0x4, 0x5, 0x6}}) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, r15, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r7, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x18}]}]}}, 0x0, 0x32}, 0x28) 3m7.130936734s ago: executing program 4 (id=379): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0xac, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cd95f09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d82c152}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d4bbae8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fdabd5f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x158cdb32}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46e0aceb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc65}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6297}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bd92ec0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x688fd65c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x336b}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000020003b00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300d00000000802110000010802110000005050505050500000030200204000bd06080211000000000063824bd83126f942a2867460041ad6954d79a3d5df8e8aceb71ecc451bea22b8fccf3cd3f3716ee78358bfd1447ba986f8085c564bc10664e796f8abce23323b24b93b01e8b0efbcf0581b29fa0b02885a4589a572fd7831980a5f1c5741dcf06e2899177a2c052abad5fc12790ed1702d8ddb82d6f3"], 0x48}}, 0x40000) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="01f775dc0503"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="879516d78b41"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x9, 0x2f, 0x8, 0x6, 0x8, 0x57, 0x6, 0x0, 0xb, 0xf, 0x0, 0x7b, 0xab}, 0xe) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26004028}, 0x800) r12 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$can_bcm(r12, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd27, 0x2, {0x60, 0x0, 0x0, r7, {0x0, 0x1}, {0x8006, 0xffff}, {0x1, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 3m7.093268767s ago: executing program 35 (id=379): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0xac, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cd95f09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d82c152}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d4bbae8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fdabd5f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x158cdb32}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46e0aceb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc65}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6297}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bd92ec0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x688fd65c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x336b}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000020003b00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300d00000000802110000010802110000005050505050500000030200204000bd06080211000000000063824bd83126f942a2867460041ad6954d79a3d5df8e8aceb71ecc451bea22b8fccf3cd3f3716ee78358bfd1447ba986f8085c564bc10664e796f8abce23323b24b93b01e8b0efbcf0581b29fa0b02885a4589a572fd7831980a5f1c5741dcf06e2899177a2c052abad5fc12790ed1702d8ddb82d6f3"], 0x48}}, 0x40000) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="01f775dc0503"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="879516d78b41"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x9, 0x2f, 0x8, 0x6, 0x8, 0x57, 0x6, 0x0, 0xb, 0xf, 0x0, 0x7b, 0xab}, 0xe) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x26004028}, 0x800) r12 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$can_bcm(r12, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) accept4(r12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd27, 0x2, {0x60, 0x0, 0x0, r7, {0x0, 0x1}, {0x8006, 0xffff}, {0x1, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) 2m58.658960159s ago: executing program 7 (id=471): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000000000000000, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") 2m58.576400916s ago: executing program 7 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020014004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a300000000009000200"], 0x94}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001b40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 2m58.469875016s ago: executing program 7 (id=473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0xfffffffe}, 0x2c) 2m58.349368476s ago: executing program 7 (id=475): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r1 = openat(r0, 0x0, 0x4c142, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) link(&(0x7f0000000000)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000040000900020073797a3100000000050004000000000005000100070000000900020073797a32000000000c"], 0x54}}, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) sendfile(r1, r1, 0x0, 0xe3aa6ea) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1008700, &(0x7f00000000c0)="a9051b00950af0adf123fcfbc47995150455066c13c6187e394a609a", 0x1c, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000100)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)) 2m57.966565189s ago: executing program 7 (id=482): r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept(r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0xde, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_MASTER={0x8, 0x9, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280"], 0x24}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000100)=0x25, 0x57) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(r4) r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4}, 0x3c) setsockopt$packet_buf(r9, 0x107, 0x5, &(0x7f00000000c0)="da0680eacc89cf591082c26522c64568c91a36985fc80a3a05546b982ccb5f65aaf9ddd98660872669c65a2f494982df99077da5e150ac0a6da83a6a8beda74f53e3aef3b3fc13add9625f86e7e511dafa0bc28d848758670e00b5cc4250d84c8b0e48aa8f9f5546c0cc4dfc25575cb8507b5eb869ec09397d7b6a1cfe05a4a44d5a22d5ba94971be858575ae21e20cb8351a600a1c63a1daa40442429bd3f1869c484a393916f2e7abfb4c0842c8cb0c2cc7f6487b9aaae20acce0f22148f", 0xbf) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080006040001aa2aaaaaaaaa0a0101ff"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2m57.645625337s ago: executing program 7 (id=488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) recvmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/74, 0x4a}, {&(0x7f0000004480)=""/26, 0x1a}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/211, 0xd3}], 0x6}, 0x82}], 0x1, 0x40002000, 0x0) 2m57.645522687s ago: executing program 36 (id=488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44014) recvmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/74, 0x4a}, {&(0x7f0000004480)=""/26, 0x1a}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/211, 0xd3}], 0x6}, 0x82}], 0x1, 0x40002000, 0x0) 2m11.170496109s ago: executing program 0 (id=1099): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4000000000000008, 0x18100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0xac14140f) 2m11.077567237s ago: executing program 0 (id=1100): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, 0x0, &(0x7f0000000180)) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20003, 0x0, 0x0, 0xa, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) (async, rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) (rerun: 32) setresuid(0x0, r3, 0x0) (async, rerun: 64) fchown(r1, r3, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x4, 0x2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000880)=ANY=[@ANYBLOB="696f636861727365743d63703836342c696f636861727365743d61736369692c756e695f786c6174653d312c696f636861727365743d63703733372c696f636861727365743d69736f383835392d352c757466383d312c757466383d302c757466383d302c73526f72746e616d653d6d697865642c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c73686f72746e406d653d77696e39352c757466383d302c73686f72746e616d653d6d697865642c726f6469722c636865636b3d7374726963742c756e695f786c6174653d302c00980bb264a1aa3b0106f7ce55fdc975d94687c661e4f913e9e1c090ed1a09f43cbc0abd1f93623eca311486c3e8673bb0c781d1abbe4d5783a9e4597e540f48fcdcc0ddd33d42a3d3104be36e4c1dff4cbc4517914ab83c45170f9192e24fd9643575a9620a4a508119d83def5962c125f5cc44dc9ff2a0ae2dfcc48f2d26ce715f6df661af97b55a9bc4d4453cf6a8a3fde447a01219576decf25de49c19cab789ed759bd832fa0f4bd3b6b50f5b7d90ed1936fb162d04fcdbea5ff71650c5e387631e250470f35f99918497890a06632648880a465a67cf6defaa8f46086f8c8797b04721df79f0c6"], 0x1, 0x36b, &(0x7f0000000500)="$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") (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c01000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000200feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a01010200000000000000000000000000000000320000000200"], 0x23c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m10.956939308s ago: executing program 0 (id=1103): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0xb00) 2m10.943245319s ago: executing program 0 (id=1104): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r1 = openat(r0, 0x0, 0x4c142, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) link(&(0x7f0000000000)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000040000900020073797a3100000000050004000000000005000100070000000900020073797a32000000000c"], 0x54}}, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) (fail_nth: 1) sendfile(r1, r1, 0x0, 0xe3aa6ea) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1008700, &(0x7f00000000c0)="a9051b00950af0adf123fcfbc47995150455066c13c6187e394a609a", 0xffffff16, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000100)="64e326f10ddfb424de2cee7d6d51144d5dc1b857b51c00dce7c1f1ef13e43695e9cd567611c1c1b981238d617af8e2dc025eb38922b8156e3e886cc7e74053bed47033e8c2a54802f9f0ef071519fa791a5a855322dde6fbc20629d398a532bda9ca175390fbe496d4d254062ee1c31b8dfea6c7bf919e6770f56c0e7fefa44b11be265d01d2ea708af5cf9db4902eba6b6cbd7e926bcd9990e0d117a603f3d55513e9017ded3bd8e3218aad91a1b5ac36419232bfce147eda2b733dbbce6c73172a8c6bd21133bc5b17609605cc4494513439ae303003acaa3d04f2b87217432e1764632b39f5e03831f3f9dfa18b81fee85bce2347b59b") ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000200)) 2m10.444220252s ago: executing program 0 (id=1105): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) pread64(r0, 0x0, 0x0, 0x7ff) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r2 = openat(r1, 0x0, 0x4c142, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) link(&(0x7f0000000000)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) get_mempolicy(&(0x7f0000001c80), 0x0, 0x5, &(0x7f00000b9000/0x2000)=nil, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000040000900020073797a3100000000050004000000000005000100070000000900020073797a32000000000c"], 0x54}}, 0x0) sendfile(r3, r3, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}, {&(0x7f00000003c0)="b3c6ce3ff10c827ff70beaaeee50d877005edb9290b5430735ed9f96eaf44b93fb287fa42305bdd33d82e83243b16c8c0ccb89ee3380387d3304597f364dc64363d1b6cfd108113d43c2ae15d3f190a619d5eb56cf0b8fb55f7ba4a78deb5321bde38b579bfce8b4ddb305e937d01c30afe2a73d9564c2eb3c1c9aa0fc316fa543e431fa315e7680b7e8b2878dd29270d3696f0f758d8617e47b64e1ebd9987ae6472cfcc69b6a439cf86c3e3148e6faf85262376555ed5ac1737cd12101debf6033c86496cbc6665bb6ad375efbf6867cab044150caf6a3360a880633e5ec60e770ca4fa0b5a4b0a9579c1ada9d79c5", 0xf0}], 0x2}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x35, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, {0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, r7, 0x6}}, 0x48) syz_clone(0x1008700, &(0x7f00000000c0)="a9051b00950af0adf123fcfbc47995150455066c13c6187e394a609a", 0xffffff16, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000100)="64e326f10ddfb424de2cee7d6d51144d5dc1b857b51c00dce7c1f1ef13e43695e9cd567611c1c1b981238d617af8e2dc025eb38922b8156e3e886cc7e74053bed47033e8c2a54802f9f0ef071519fa791a5a855322dde6fbc20629d398a532bda9ca175390fbe496d4d254062ee1c31b8dfea6c7bf919e6770f56c0e7fefa44b11be265d01d2ea708af5cf9db4902eba6b6cbd7e926bcd9990e0d117a603f3d55513e9017ded3bd8e3218aad91a1b5ac36419232bfce147eda2b733dbbce6c73172a8c6bd21133bc5b17609605cc4494513439ae303003acaa3d04f2b87217432e1764632b39f5e03831f3f9dfa18b81fee85bce2347b59b") ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000200)) 2m10.12704471s ago: executing program 0 (id=1113): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000000010000000000000000002020000000000000001000005000000000000000001"], &(0x7f0000000e40)=""/4100, 0x3e, 0x1004, 0x8}, 0x28) 2m10.126813479s ago: executing program 37 (id=1113): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000000010000000000000000002020000000000000001000005000000000000000001"], &(0x7f0000000e40)=""/4100, 0x3e, 0x1004, 0x8}, 0x28) 2m10.1238643s ago: executing program 2 (id=1116): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x3, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x1800, 0x2}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x51}, 0x28) 2m10.091912493s ago: executing program 2 (id=1117): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m9.395822533s ago: executing program 2 (id=1125): socket(0x1e, 0x4, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket(0xd980a396b3ac1b47, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x200}, &(0x7f00000010c0)=0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4c, @loopback, 0x2}}, 0x6, 0x8da7}, 0x90) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x2151090, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001f80)=@deltfilter={0x10f8, 0x2d, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0xfff0}, {0xffe0, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x107c, 0x2, [@TCA_BASIC_POLICE={0x1078, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x200, 0x80000000, 0x1, 0x90c, 0x4, 0xa0f, 0x800, 0x9, 0x101, 0xfffff92a, 0x80, 0x7, 0x2, 0x67, 0x0, 0x2, 0x8, 0x6, 0x854, 0x2, 0x2, 0x7, 0xf, 0x9, 0x5, 0xd5a, 0x3, 0x5, 0x8000, 0x8, 0x6, 0x1000, 0x1361, 0x3, 0x2, 0x8, 0xca, 0x503, 0x3, 0x1, 0x6, 0xffffffff, 0x7, 0x7ff, 0x2, 0x81, 0x3, 0x2, 0x1, 0x9, 0x22ca, 0x1, 0x7ff, 0xfff, 0x1, 0xfffffffe, 0x0, 0x81, 0x8, 0x1000, 0x8001, 0x5, 0x0, 0x5, 0x6b9c, 0x9, 0x7, 0x6, 0x77d1, 0xfffffffe, 0xe2, 0x3, 0xfffffff1, 0x0, 0x5, 0xee, 0x50d78e93, 0x2, 0x5, 0x10000, 0x9, 0x6, 0xe9a, 0xf9d, 0x6, 0x9, 0xfffffffa, 0xfffffffd, 0x600, 0x7, 0x2, 0x8, 0x3, 0x2, 0x0, 0x80, 0x6, 0x9, 0x0, 0xa2a1, 0x58ff, 0x8d2d, 0xfffffff7, 0x81, 0x82ba, 0xd, 0x6, 0x3, 0x9, 0x101, 0xce000000, 0x5, 0xffffff80, 0x1, 0x11f, 0x101, 0x3, 0xd, 0x400, 0x11e, 0xff, 0x8c1, 0x5, 0x7, 0x6, 0x8, 0xfffffff8, 0xddbf, 0x5, 0x6, 0x2000000, 0x1, 0x5, 0x4, 0x0, 0x8000, 0x23a46c15, 0x7, 0x80000001, 0x7, 0x1, 0x88, 0xffffff80, 0x5, 0x6, 0x69a, 0xfffff1bc, 0x6, 0xff8, 0x0, 0x4, 0x6, 0xa00, 0x7, 0x5, 0x40, 0x3ff, 0x4, 0x6, 0xfffff801, 0x7fffffff, 0x6, 0x4, 0x9, 0x5, 0x1, 0x400, 0x6, 0x14f, 0x4, 0x7, 0x5, 0x8, 0x7, 0x3, 0x6, 0xafe, 0x8dc, 0x10, 0x1, 0x10000, 0x4a5, 0xfff, 0x9, 0x47, 0x9, 0x3, 0x7, 0x6, 0xfffffffc, 0x1000, 0x3, 0x1, 0x8, 0x16, 0x9, 0x76, 0x401, 0x3, 0x5, 0x4, 0x1, 0x3, 0x7ff, 0x26, 0x1116, 0x3, 0x2, 0x7, 0x2, 0x8001, 0x1, 0x8, 0x7fffffff, 0x0, 0x7, 0x8, 0x1000, 0x10, 0x4, 0x3, 0xd, 0x7, 0x800, 0xe5b9, 0xfff, 0x7000000, 0x1, 0x9, 0xb, 0x4, 0xf000, 0xd06, 0x5, 0x6, 0x6b5, 0x53ca, 0x5, 0x8, 0x5, 0x1, 0x800, 0x6, 0x425, 0x9, 0x312a, 0x1000, 0x7, 0x10001, 0x800, 0xfffffffd, 0x6, 0x5, 0x9bb, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffacde3972}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x2, 0x1, 0xae74, 0x0, {0x4, 0x1, 0xbf, 0x1, 0x66ac, 0xe}, {0x6, 0x2, 0x1, 0x6, 0x0, 0x6a}, 0x4, 0x7, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80, 0x0, 0x8, 0x4, 0x6, 0x3, 0x9, 0x4, 0x17, 0x4, 0x1, 0x4, 0x1d8ce5cf, 0x3, 0x1, 0x7, 0x8001, 0x800, 0x1ff, 0xfffffff9, 0xb6f, 0xbe, 0x0, 0x2, 0x9, 0x6, 0xfff, 0x401, 0x0, 0x80, 0x3, 0x80000000, 0x67af47f6, 0x20, 0x4, 0x67, 0xc, 0x400, 0x6, 0x7, 0x7, 0x4, 0x40, 0x1, 0xffffffeb, 0x7, 0x1, 0x7e, 0x2, 0x0, 0x4, 0x5, 0x8, 0x6, 0x10000, 0xfffffffc, 0x2, 0xf, 0xffff, 0xcf, 0x1, 0x1000, 0xd, 0x93, 0x2, 0xdde7, 0xfffffffe, 0x5, 0x80000001, 0xe, 0x0, 0x8, 0x0, 0xfffffff7, 0xf, 0xc3c, 0x129c932, 0x0, 0x56c6, 0x8, 0x2, 0x80, 0x54, 0x1, 0x1ff, 0x0, 0x1, 0xb, 0xa57, 0x1, 0x9, 0x8, 0x80000001, 0x8000, 0x8, 0x4, 0x9, 0x2, 0x79, 0x3, 0x8, 0x5, 0x8, 0xd, 0x14e, 0x8001, 0xcf, 0xaef, 0xd9, 0x20, 0x19, 0x7, 0x800, 0xf, 0x6afc, 0x0, 0x8, 0x6, 0xba8, 0x9, 0x8, 0x1432, 0x3dc0, 0x9, 0x9, 0x5, 0xb8, 0x6, 0x5, 0x7, 0x0, 0x4, 0x759a, 0x200, 0xbb, 0x5, 0x0, 0x597, 0xfffffff7, 0x800, 0x401, 0x3, 0xac1, 0x4, 0x9, 0x3, 0x8000, 0xff, 0x473, 0x7, 0x800, 0x8, 0x1a, 0x8, 0x80000000, 0x1, 0x1, 0x7fffffff, 0xfffffffa, 0x10000, 0x80000000, 0x9, 0x5, 0x5, 0x3665, 0x8000, 0x9, 0x4, 0x8, 0x5, 0x6c08, 0x8, 0x1ff, 0x7, 0x2, 0x7fffffff, 0x9, 0x99, 0x2, 0x9, 0x9, 0x44, 0x2, 0x3, 0x1, 0x7, 0x7, 0x5, 0x81, 0x5, 0x8, 0xfff, 0x1, 0x7fffffff, 0x401, 0x1ff, 0x80000001, 0x2, 0xa, 0x1, 0xc7, 0x8, 0x219, 0x7fff, 0x9, 0x5, 0xaec6, 0x6, 0x2, 0xfffffffe, 0x0, 0x3, 0x9, 0x1, 0x2, 0x80000000, 0x7f, 0x80000001, 0x9, 0xd3a1, 0x6, 0x78cc, 0x1, 0x5, 0x4, 0xfffffff8, 0xffff, 0x8, 0x10000, 0x9, 0x1, 0x82, 0x0, 0xe3509177, 0xc7b6, 0x4, 0x9f8f, 0x1, 0x8, 0x3, 0x6, 0xc, 0x8, 0x3ff, 0x81, 0x4377, 0x69a, 0x9, 0x100, 0x100, 0x3, 0x10, 0xa7, 0x7fff, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfe9, 0x7, 0x8, 0x1, 0x2, 0x0, 0x2, 0xe7f, 0x7fff, 0x1, 0x5, 0x5, 0x10001, 0x100, 0x0, 0x18, 0x4, 0x5, 0x101, 0x7, 0x0, 0xfff, 0x80000001, 0x7, 0x0, 0xffffff5f, 0x800, 0x1, 0x5a, 0xffff, 0x8, 0x6, 0x3, 0x3, 0x6, 0x7, 0x7fff, 0x9, 0x0, 0x9a, 0x8, 0x5, 0xbb4, 0x10001, 0x3a0, 0x0, 0x9, 0x8, 0x5, 0x2, 0x4, 0x5, 0x2, 0x8, 0x8c33db66, 0xc, 0x7fff, 0xfb23, 0x400, 0x2, 0xf, 0x6a5, 0x5, 0xed, 0x8, 0x9, 0xfffffffd, 0x4, 0x0, 0x7fff, 0x9, 0x8, 0x2, 0x2, 0x0, 0x182d, 0x5, 0x1, 0x10, 0x7, 0x662, 0x80000001, 0x9, 0x7, 0x8000, 0x400, 0x3, 0x2, 0x7, 0x3, 0x5e, 0x1a7, 0xf, 0x3ff, 0x8, 0xb, 0x3, 0x1, 0xfffffffd, 0x7, 0x1, 0x1, 0x6, 0x9, 0x10, 0xe, 0x6, 0xfffffffd, 0x4, 0x5, 0x9, 0xd, 0x3800, 0x9f57, 0x5, 0x4, 0x1000, 0x44, 0x9, 0x8, 0x1ba, 0x0, 0xe8c3, 0x3, 0x2, 0x9, 0x8, 0x5, 0x1a9de4de, 0x7, 0x6, 0x1, 0x0, 0xffff, 0x4, 0x8d, 0x6, 0x6, 0x7f, 0x7, 0x80, 0x9, 0x6808, 0x7, 0x401, 0x6, 0x8d6, 0x9, 0x3, 0xa, 0x5, 0x0, 0x6, 0x8, 0x5, 0x7, 0x8, 0xdcc6, 0x2, 0x3, 0xfd9c, 0x8, 0x401, 0xcc, 0x400, 0xa2, 0x1, 0x1, 0x8001, 0x1, 0x2, 0x10000, 0x200, 0x9, 0x3, 0xfffffffd, 0x4, 0x0, 0x400, 0xfffffa0a, 0x5ebb, 0x8, 0x80, 0x495e, 0x0, 0x8, 0x94, 0x10, 0x101, 0x7, 0x0, 0x3, 0x9, 0x8, 0x5, 0x6, 0x700, 0x9, 0xff0, 0x8, 0xefdc, 0x5, 0x6912, 0x8, 0x101, 0x7, 0x9, 0x7fff, 0x30, 0xfffffffe, 0x834, 0x8000, 0x3, 0x5, 0x400, 0x25, 0x4, 0x80000001, 0x1, 0xba44, 0x5, 0x5, 0x81, 0xd, 0x10001, 0x2, 0xc, 0x0, 0x4, 0x0, 0x8, 0x3, 0xff, 0x0, 0x1, 0x9f0, 0x7fffffff, 0x5, 0x6, 0x8, 0x6, 0x8, 0x9, 0x5, 0x401, 0x40, 0x6, 0x3, 0x0, 0x519, 0x7, 0xfff, 0x8, 0x80000000, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x200000, 0x9, 0x5, 0x2, 0x6, 0x6, 0xfffffffd, 0xacf, 0x1, 0x7fffffff, 0x0, 0xea, 0xffff0001, 0x5, 0xe2, 0x4, 0x7, 0x6, 0x40, 0xfffffffd, 0x5, 0x2, 0xd1e, 0x4, 0x2, 0x100, 0x5, 0x9, 0x1, 0x8, 0x3, 0x3, 0xc7, 0x10, 0x0, 0x1f, 0xffffb17b, 0x0, 0xd8, 0x54, 0x7f, 0x6, 0x6, 0x100, 0x6, 0x4, 0x1, 0xfff, 0x4, 0x2, 0x2, 0x9, 0x4, 0x4, 0xfffffffe, 0xfffffff2, 0x6, 0xd, 0x2, 0x2, 0x7, 0x6, 0x0, 0x7, 0x5, 0xb9, 0x0, 0x8, 0x3, 0x400, 0xee3, 0xffffffff, 0x800, 0x8, 0xa539, 0xffff, 0x1000, 0x0, 0x40, 0x4128, 0x7, 0x9e, 0x0, 0x8, 0x9, 0x8, 0x33f, 0x56, 0x8, 0x2, 0x5, 0xffff8001, 0x4, 0x3, 0xd2e2, 0x9, 0x7fffffff, 0x401, 0x0, 0x5, 0x7, 0x9, 0x5fa7b4c, 0x7, 0x4, 0xfe9, 0x1, 0x6e, 0x8, 0x9, 0x9, 0x5, 0x5, 0xe, 0x7, 0x1000, 0x2, 0x4, 0x3, 0x6, 0x4, 0x4, 0x380000, 0x9, 0x5, 0x8, 0x9, 0xd988, 0xb9f6, 0x9, 0xc, 0x80000, 0x5, 0x2, 0x2, 0x8, 0x101, 0x4, 0xc7, 0x9, 0x5, 0x1, 0x9, 0xfff, 0x7ece, 0x1, 0x4, 0x9, 0x2, 0x3, 0x3, 0x7, 0xfffffffe, 0x100, 0x200, 0x0, 0x545, 0x8, 0x8, 0x3, 0x6, 0x401, 0x9, 0x6bd2, 0x937, 0x3, 0xa2ae, 0x5, 0x7fff, 0x573, 0x7, 0x8000, 0xffffffff, 0x0, 0x1, 0x5, 0xff, 0x10000, 0x101, 0x10000, 0x9, 0x4, 0x7f, 0xffff, 0x68, 0x40, 0xfff, 0x9, 0x4, 0xfffffffe, 0x3, 0x8, 0x252, 0x0, 0x10000, 0xcb, 0xffffff0a, 0xe5, 0x5, 0x7ff, 0x9, 0x4, 0xe819, 0x3, 0x99, 0x28, 0x2ce4269f, 0x89, 0x8, 0x7ff, 0x10001, 0xfffff3d5, 0x8, 0x6, 0x2, 0x7, 0xa4, 0x9, 0x3, 0x7, 0xf, 0x896b, 0x9, 0x1, 0x0, 0x4e, 0xf8, 0xfffff97e, 0xff, 0x7, 0x5, 0x4, 0x80, 0x7, 0x10001, 0x2, 0x8001, 0x8, 0x4ff3, 0x40, 0x80, 0x3, 0x5, 0x4d5, 0xffffffff, 0x400, 0x101, 0x5, 0xcd, 0x8, 0x6, 0x3, 0x9, 0x4, 0x1, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe8a5}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x80000001}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @remote}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x10f8}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x4084) 2m8.994753488s ago: executing program 2 (id=1126): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x20, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7fffffff, 0x1}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xe, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=')', 0x1}, {&(0x7f0000000540)="4ea1", 0x2}], 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x208018, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x442, 0x40) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010254f5f16547b395059f039952e30be885ad4d37739a5a546960690986a534651ca69fd977d5ae422c9ba987981a6456f22e728457a94a62a901317b7a771982c0e21525bc63a27a97be83b0ce8d042eccbdb48c54b8096a0cfb27549c74905f2938958846aa0f1b698e05c386ce9b705e0d5262365e5df3fa50d524503f83a7f6f9f1e22e663ffb8f3291b53ae74af1293ae7770a427f27397aa77fc2b5127bebb000ebae49186cd", @ANYRES16=r2, @ANYBLOB="02022cbd7000fbdbdf250300000005000400010000000900030073797a32000000000900010073797a320000000005000400020000000900010073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x44840}, 0xc8) fcntl$setpipe(r1, 0x407, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r11], 0x80}}, 0x8000) open$dir(&(0x7f0000000180)='./file0\x00', 0x2, 0x100) 2m8.96739276s ago: executing program 2 (id=1127): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x8}, {0x0, 0x9}, {0x6, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x4000, 0x1}, 0x20040054) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(0x0, r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2m8.583455064s ago: executing program 2 (id=1130): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0) open(0x0, 0x8000, 0xa0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) write$P9_RREADDIR(r3, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0) (async) open(0x0, 0x8000, 0xa0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) (async) write$P9_RREADDIR(r3, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x5) (async) 2m8.500795941s ago: executing program 38 (id=1130): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0) open(0x0, 0x8000, 0xa0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) write$P9_RREADDIR(r3, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x5000, 0x0) (async) open(0x0, 0x8000, 0xa0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x46, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) (async) write$P9_RREADDIR(r3, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x5) (async) 29.699141123s ago: executing program 8 (id=2517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="380100000001010400000084ffffff00020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000"], 0x138}}, 0x4) 29.568808185s ago: executing program 8 (id=2518): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_setup(0x6, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7997}}, {@resuid}]}, 0x2, 0x461, &(0x7f0000000300)="$eJzs3MtvG8UfAPDvbh799fVLKOXRBxAoiIhH0rQFeuAACASHIiHBAY5RklalboOaINGqghShckIIiTviyL/ACS4IcULiCndUqUK9tOVktPbasV3brV07buPPR9pkZnc2M1/vjj27400AQ2sq+5FE7IiIPyNiopytLzBV/nX96oWFG1cvLCRRLL77T1Iqd+3qhYVK0cp+2/PMdBqRfpHEvib1rpw7f2q+UFg6m+dnV09/NLty7vzzJ0/Pn1g6sXTm0NGjRw7PvfTioRc6iidtsT5r07W9ny7v3/PWB9+8feyruvgb4uiRqXYbnyoWe1zdYO2sSSejA2wIHRmJiOxwjZX6/0SMxPrBm4g3Ph9o44C+KhaLxe2tN68VSybKBYFNJmno2mud7NvrxgAbqPJBn13/VpbGQcAr/Rt+DNyVV8sXQFnc1/OlvGW0ei9hrOH6tpemIuL9tX+/y5boz30IAIA6P2Xjn+eajf/SeLCm3P/zuaHJiLgvInZFxP0RsTsiHogolX0oIh7usP7GSZKbxz/p5a4Cu03Z+O/lfG6rfvxXnUmaHMlzO0vxjyXHTxaWDuavyXSMbcnyc23q+Pn1P75uta12/JctWf2VsWDejsujW+r3WZxfnb+TmGtduRixd7RZ/El1JiCJiD0RsbfLOk4+88P+VttuHX8bPZhnKn4f8XT5+K9FXfxr1TJJ+/nJ2f9FYengbOWsuNlvv196p1X9dxR/D2THf1vT8786CzyZ1M7XrnRex6W/vmx5TdPt+T+evFdKj+frPplfXT07FzGeHCs3unb9ofV9K/lK+Sz+6QPN+/+uWH8l9kVEdhI/Em9uezQiHsvb/nhEPBERB9rE/+trT37Yffz9lcW/2NHxX0+MR+Oa5omRU7/8WFfp5E3x32h//I+UUtP5mtt5/7uddnV3NgMAAMC9J42IHZGkM9V0ms7MlL8vvzsiLSyvrD57fPnjM4vlZwQmYyyt3OmaqLkfOpdf1pfzFyOi/NWCyvbD+X3jb0e2lvIzC8uFxUEHD0Nue4v+n/l7pPV+HvGATUJnhuGl/8Pw0v9heN2q/7f6pxrAva9J/986iHYAG6/Z5/9nA2gHsPEa+n+baT9gs3H/D4aX/g/DS/+HobSyNW79kHzbROUvdbn7pk3E2F3RjL4lIr0rmiHRp8Rg35cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB65b8AAAD///TU3b4=") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x20001, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000101}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x1778, &(0x7f00000000c0)={0x0, 0x4, 0x3000}) poll(&(0x7f0000000740)=[{r3, 0x10}], 0x1, 0xed) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001840)=[{0x0, &(0x7f0000000000)=0x90, 0x82}, {0x7, &(0x7f0000000140)=0x2, 0x2}, {0xc5, &(0x7f0000000180)=0x11, 0x2}, {0x4, &(0x7f00000001c0)=0x5, 0x82}, {0x15e3, &(0x7f0000000240)=0x3, 0x2}, {0x1ff, &(0x7f00000002c0)=0x1, 0x82}, {0x9b8a, &(0x7f0000000340)=0xf, 0x82}, {0x7, &(0x7f0000000380)=0xed, 0x1c7}, {0x28, &(0x7f00000003c0)=0xffffffffffffb78f, 0x2}, {0x9, &(0x7f0000000400)=0x100000001, 0x82}, {0x1, &(0x7f0000000440)=0x6e, 0x2}, {0x4, &(0x7f0000000480)=0x1ff, 0x2}, {0x3, &(0x7f00000004c0)=0x6, 0x2}, {0x100000001, &(0x7f0000000500)=0x2, 0x82}, {0x1, &(0x7f0000000540)=0xffffffff7fffffff, 0x2}, {0x400000, &(0x7f0000000580), 0x2}, {0x1000, &(0x7f0000000680)=0x6, 0x2}, {0xc, &(0x7f00000006c0)=0x4, 0x2}, {0x1, &(0x7f0000000700)=0xfffffffffffffff8}, {0x8000, &(0x7f0000000740)=0x5, 0x2}, {0xfe2, &(0x7f0000000780)=0x1, 0x82}, {0x3ff, &(0x7f00000007c0)=0x2, 0x2}, {0xffff, &(0x7f0000000800)=0x2, 0x82}, {0x5, &(0x7f0000000840)=0x10, 0x2}, {0x0, &(0x7f0000000880), 0x2}, {0x2b, &(0x7f00000008c0)=0x9, 0x82}, {0x9, &(0x7f0000000900)=0x89eb, 0x2}, {0x3, &(0x7f0000000940)=0x2, 0x82}, {0x2, &(0x7f0000000980)=0xfffffffffffffffa, 0x2}, {0x6, &(0x7f00000009c0)=0x6, 0x2}, {0x2f, &(0x7f0000000a00)=0x9, 0x2}, {0x7, &(0x7f0000000a40)=0x5, 0x82}, {0x80000001, &(0x7f0000000a80)=0x82, 0x82}, {0x80000000, &(0x7f0000000ac0)=0x9df, 0x82}, {0x8000, &(0x7f0000000b00)=0xb, 0x82}, {0x100, &(0x7f0000000b40)=0xce, 0x2}, {0x3, &(0x7f0000000b80)=0xfffffffffffffffe, 0x82}, {0x8, &(0x7f0000000bc0)=0xa00000000000000, 0x2}, {0x4b10, &(0x7f0000000c00)=0x8, 0x82}, {0x200000000000000, &(0x7f0000000c40)=0x61, 0x82}, {0x7, &(0x7f0000000c80)=0x7, 0x82}, {0x8, &(0x7f0000000cc0)=0xc9, 0x82}, {0x8, &(0x7f0000000d00)=0x9, 0x82}, {0xa3b6, &(0x7f0000000d40)=0x9, 0x82}, {0x2b3, &(0x7f0000000d80)=0x8, 0x2}, {0x29, &(0x7f0000000dc0)=0x8, 0x82}, {0x5, &(0x7f0000000e00)=0xffffffff, 0x82}, {0x9e67, &(0x7f0000000e40)=0x4, 0x82}, {0x1, &(0x7f0000000e80)=0x800, 0x82}, {0x1, &(0x7f0000000ec0)=0x2000, 0x82}, {0x5, &(0x7f0000000f00), 0x2}, {0x64, &(0x7f0000000f40)=0x80000000}, {0x7, &(0x7f0000000f80)=0x9, 0x82}, {0x3, &(0x7f0000000fc0)=0x10000, 0x82}, {0x0, &(0x7f0000001000)=0x5, 0x2}, {0x80000000, &(0x7f0000001040), 0x82}, {0xfffffffffffffffc, &(0x7f0000001080)=0x1, 0x82}, {0x7, &(0x7f00000010c0)=0xa, 0x82}, {0x2, &(0x7f0000001100)=0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000001140)=0x8, 0x2}, {0x1, &(0x7f0000001180)=0xfffffffffffffff9, 0x2}, {0x5, &(0x7f00000011c0)=0x6, 0x82}, {0x2, &(0x7f0000001200)=0x3, 0x82}, {0x7, &(0x7f0000001240)=0x3, 0x2}, {0xa, &(0x7f0000001280)=0x5, 0x2}, {0x2, &(0x7f00000012c0)=0x1, 0x82}, {0x10000, &(0x7f0000001300), 0x2}, {0x8, &(0x7f0000001340)=0xc2f, 0x82}, {0x8, &(0x7f0000001380)=0x101, 0x2}, {0xa637, &(0x7f00000013c0)=0x8000000000000001, 0x82}, {0x5, &(0x7f0000001400)=0x40, 0x82}, {0x0, &(0x7f0000001440), 0x82}, {0x9, &(0x7f0000001480)=0x4, 0x2}, {0x1, &(0x7f00000014c0)=0x4, 0x2}, {0x7f7fbe1a, &(0x7f0000001540)=0x6, 0x2}, {0x7fffffff, &(0x7f0000001580)=0x7, 0x82}, {0x80000000, &(0x7f00000015c0)=0xc9, 0x2}, {0x8, &(0x7f0000001600)=0x4, 0x2}, {0x0, &(0x7f0000001640)=0x4, 0x82}, {0x3, &(0x7f0000001680)=0x557a, 0x2}, {0x2, &(0x7f00000016c0)=0x6, 0x2}, {0x3, &(0x7f0000001700)=0x1, 0x2}, {0x2, &(0x7f0000001740)=0x73, 0x82}, {0x1c, &(0x7f0000001780)=0xf20, 0x82}, {0x2, &(0x7f00000017c0), 0x82}, {0x0, &(0x7f0000001800)=0x1, 0x82}], 0x56, 0x0, &(0x7f0000002080)={0x77359400}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x1, 0x4000001, 0xfffe}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) 29.069985958s ago: executing program 8 (id=2524): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100020e0000002cbd7040fcdbdf25050a0600000000000a004e2300000007ff010000000000000000000000000001010000800000000005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013000200000029bd7000063500001922263f43c7c56c233f8993b1ac79db7b74abbef9a7e928130fb03f5d6bc028e0ad4735f9f9189dd14d8b1552de5ade67b7579af0140ce7fc4c4d9adc1cb4f79c9c524813a69622affab2b0ca9c804d5d1cd502453104ba44b2"], 0x70}, 0x1, 0x7}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x2) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x8, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='exfat\x00', 0x1) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r6, 0x1, &(0x7f00000001c0)={0x0}) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x800006, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3da8167793005a7b4899ad394a533f771dea8be38569c8ac1c4dc7c0c352d3f3399641968c8cf01e10362fa1c32e67e0b9b6db00eba5083b42b13d8fc2ae2c154d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) 28.93107381s ago: executing program 8 (id=2527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="700100001a00330602000000fddbdf2500000000000000000000000000000000e0000002000000080000000000000000000040004e2380010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000200000000000000000003200000000000000000000000000000000000000230300000000000000000000000000000000000000000000fdffffffffffffff0900000000000000be92000000000000000000000000000000000000000000004253000000000000000004000000000000000000000000000300000000000000fbffffff0000000009ca000028bd70000235000002"], 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 28.802242671s ago: executing program 8 (id=2530): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0x7800}, 0x0, 0x40000000, 0x7, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='task\x00') lseek(r3, 0xfffffffffffffffd, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) unshare(0x2a020400) r4 = socket(0x10, 0x3, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000002c0)={0x80}) sendfile(r4, r5, 0x0, 0x7fffffffffffffff) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) r6 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r6, 0x184) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 27.098534069s ago: executing program 8 (id=2557): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001340)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) 11.035378143s ago: executing program 39 (id=2557): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001340)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) 6.557470731s ago: executing program 1 (id=2766): futex(&(0x7f0000000000), 0x109, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x2) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_tid_address(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030003eb1600002cbd7000fbdbdf25020013000100000029bd700003350000030006000000000002004e22d2000002000000000000000002000100000000000000070c01000000030005000000000002004e3342517345b64beef5b8a5a23521ac1e0101000000000000000070d3120b381719a33fecaa20b40ec3fc9aeb78abef81d0f62d132b1c6df7072d86ace9c9be859db7cc"], 0x60}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0x6d7dc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)={0x14, r3, 0x100, 0x70bd29, 0x0, {0x5}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x2000000, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 6.557098261s ago: executing program 5 (id=2767): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x3e, 0xfffff, 0x1}, 0x28) 6.556362871s ago: executing program 3 (id=2768): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x8, 0xfffffff9, 0x88, 0xb4, 0x3, 0x7}, {0x40, 0x3, 0x9, 0x0, 0xffffffffffffff39, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x4, &(0x7f0000000140)=@raw=[@ringbuf_query], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) getcwd(&(0x7f0000000040)=""/248, 0xf8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = dup3(r3, r2, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000002e00), r4) 6.555958041s ago: executing program 9 (id=2769): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nolazytime}, {@lazytime}, {@sysvgroups}, {@norecovery}, {@usrjquota}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000001b40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x14, 0x6, 0x2, 0x401, 0x70bd27, 0x25dfdbfd, {0xe, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x400c800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5800}], 0x14, 0x7800, 0x5800, 0x3) 5.435043668s ago: executing program 1 (id=2770): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) 5.434747349s ago: executing program 5 (id=2771): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r5, @ANYBLOB="83000400000000fd2800128008000100736974001c000280080002e0feffffff080003000500000106000e0000000000565169e69e6986fab11cb30be7049de90cf07937452060d5e468fb1890b9a1f9354a3abb3cb3247a2b175e92"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x2, 0x88) 5.434526918s ago: executing program 3 (id=2772): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8300, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1000000, 0x0, 0x171a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.434023408s ago: executing program 9 (id=2773): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, r1) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000100)=0x40000000) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000380)={'team0\x00', @broadcast}) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0xa01001, &(0x7f0000000180)={[{@i_version}, {@data_ordered}, {@nombcache}, {@debug}], [{@smackfsroot={'smackfsroot', 0x3d, '#({}:},]'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x33, 0x39, 0x63, 0x65, 0x35, 0x66, 0x37], 0x2d, [0x35, 0x65, 0x63, 0x61], 0x2d, [0x38, 0x63, 0x63, 0x66], 0x2d, [0x37, 0x38, 0x66, 0x39], 0x2d, [0x62, 0x39, 0x62, 0x35, 0x32, 0x36, 0x66, 0x36]}}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}, {@uid_eq={'uid', 0x3d, r2}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise}]}, 0x0, 0x6be, &(0x7f0000000780)="$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") r4 = socket(0x40000000015, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x26) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n\x00\x00\x00I\x00\x00\x00\f'], 0x50) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x6335, r0, 'id0\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @broadcast}) 4.26519498s ago: executing program 1 (id=2774): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e03000000c5000000002e00000000000d04000000040000000000000c02000000000000006100"], 0x0, 0x46}, 0x28) 4.2643052s ago: executing program 5 (id=2775): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000100000000000a000000000000000400040008000100010000"], 0x24}, 0x1, 0x0, 0x9fffffffffffffff}, 0x0) 4.26383683s ago: executing program 3 (id=2776): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000084070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d697400000024000280"], 0x118}}, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x2, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @random="7e25c93b52d8", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x8, 0xca, 0x0, 0x1000, {[@eol, @fastopen={0x22, 0x4, "da80"}, @generic={0x4, 0xa, "219bf9d6611ba946"}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4004090}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x181, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x2) prlimit64(0x0, 0xb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x1) 4.253680541s ago: executing program 9 (id=2777): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0xd8, r2, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x7c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x3, 0x200}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x4) sendmsg$nl_route(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800400000001001c0012800b00010067656e65766500000c00028008001b00000000000a0001"], 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 2.898767358s ago: executing program 1 (id=2778): socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0xfed7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0xfffffffd}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x340008e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000200000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.898435418s ago: executing program 5 (id=2779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b000000000003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.898214048s ago: executing program 3 (id=2780): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0xfff5, 0x0, 0x4000850}, 0x40) 2.897677129s ago: executing program 9 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000040)=0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0xffffffff8de282fc, 0x0) r1 = socket(0x2, 0xa, 0x300) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '{\\-\xfd\x00'}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e0066000007027f00"], 0x0) exit(0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) 1.519442298s ago: executing program 1 (id=2782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 1.518790298s ago: executing program 5 (id=2783): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x8000, &(0x7f0000000a80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8, @ANYBLOB="41f53d8ea4eec15e3b0ac51edc2f1a99904001af7628ab56cda055a83b23b4f950c1c337588ed3b42f34752bd70e307237c846cc2d4de67127ff2177b7ea426e8b93f4f72bd2f6a34234016c53ee26f75eaa7e6df5a207f445cd303f6afb4f6370dc09696c91a171cbb13732c4f50f6b8ad51c1317eea579f39b1b38e75b237b78fbdef031ae262245dad9f72613b062a823e826dd87cac564731eb0f5bf6f48d4a3bf48ac3bf16381b3da5cd075213cf2f8d136d8653803ba3dc9e88a953bb68a9f1b4f2c06baa855d2cfcdb94edc48223db9c7a2c25a3b9080ecd549252f5ab8f73f46a9e8da6d7a0ff3", @ANYRESHEX, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2c6, &(0x7f0000000740)="$eJzs3EFLG2kcx/GfiWtiRJOFZWEXdvdh97J7CZo97HE3LArLBlqskbaHwlgnbcg0kZlgSSk1l9JrX4f02Fuh7RvwUnrpvTcpFHrxUDrFmcRONGrUxGj9fkCeJ/N/fsyjM8o/AWfz6uM7lZKXLVl1xZJGMampLSmzPWsZaY2xYD6mqKb+mPjw5qcr167/ny8UZueNmcsv/Jkzxkz98vzu/Se/vqxPLD6depbQRubG5vvc242xjR82Py3cLnum7JlqrW4ss1Sr1a0lxzbLZa+SNeayY1uebcpVz3Y76iWntrLSMFZ1eTK14tqeZ6xqw1TshqnXTN1tGOuWVa6abDZrJlO6wGLSaA/Liuvz81Z+37If7+umMHDj3Q66br7ZvVhcP4U9AQCAM+bg/j/s9ffv/wuL4XiU/v/7w/t/if5/QJodrw7p/3Fe/RW9+103b6Vav7+d6P8BAAAAAAAAAAAAAAAAAAAAADgPtnw/7ft+entsHQpeJyQlJfmt+pC3iQGJXn8/8nXI9f97SNtFn0X+cS8pOY9Wi6vFcAzr+ZLKcmRrWml9DO6HlnA+919hdtoEMnrhrLXya6vFuBLtfFumW/7nb2fCvOnMf6NU9Pw5pfVd9/PnuubH9PtvkXxWab26qZocLQf39Zf8gxlj/r1U2JUfD9YBAAAAAPA1yJode96/B/VgQVJ762E+8vmA7/trB30+sOv99ah+7OURlQAAAAAA4MS8xr2K5Ti2e4xJQtIJ4v2f+L40/G3Edex4SgPb2D+SzshlOo1JUlJ4xBwn/m4n3lPK72HNqKSh/1iOMBn2XyYAAAAA/dZu+ke8I4RePxzgjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuHh6fR5Ye/2eUrtwQDxyuvipf4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGfI5AAD//7+SG5Y=") openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000004000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000030000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002a132b79aa3500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000016c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, "a9706d", 0x44, 0x2f, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x6, 0x2, 0x0, 0x3, 0x7, 0x50}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0xffffffff, {{0x1, 0x2, 0xff, 0x3, 0x1, 0x1, 0x6, 0xf5}, 0x2, {0xd7, 0xffff, 0x1, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) r5 = syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r5, 0x92, 0x2, 0x4a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.517138469s ago: executing program 3 (id=2784): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) 1.514490269s ago: executing program 9 (id=2785): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200100, 0x4) socket$l2tp(0x2, 0x2, 0x73) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x9, 0x3) syz_clone(0x20180000, &(0x7f0000001fc0)="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", 0x1000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="7f4c9d5059307d867b5c92f2891f9a7e806f1f52ea95e098ccee4bde3d22b84b415c29ff1a6c3e9cbbc9575438770f172d0a15163b42ba3cdd9cf885cc3bb0bedc77514df3db9bf1756bb2dbb222259bd9ae3b75a46f89728c425b25c45a2a335fd038a685f554dd1a7b3ab549d33c350b6462c4ef6dbeedca464386d8eb415f485f4a1f10420e6f8e6e2ac12c3dc87e6799fc40f6ba336d53dcd296a783b7cf2012629584e4b3c3c1340f0ed98dc40b89ee4ceb8a47626fd4c2a3ab4fc146") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget$private(0x0, 0x20000000102, 0xf3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210003000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20084884) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="da9d8700", @ANYRES16=r6, @ANYBLOB="25042abd7000fddbdf2509000000050005000700000008000400f7ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000330001072cbd7000fedbdf2502"], 0x14}}, 0x24044094) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f00000000001f000000", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.22321ms ago: executing program 1 (id=2786): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'cs\x00'/19}], 0xa, "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"/333}, 0xfffffffffffffeb0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) unlink(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000fffff9000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000005a440000000000000000000000000000000000000000000000000000000000000000fe9dffff00000000"]}, 0x108) r2 = getpid() sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/1125], 0x42c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r3 = syz_pidfd_open(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/cgroup\x00') ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0xff07, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 622.8µs ago: executing program 5 (id=2787): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") fallocate(0xffffffffffffffff, 0x10, 0x6, 0x10001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs(r4, &(0x7f0000000200)='oom_score_adj\x00') r5 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34a}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r7, 0x3, 0x4100, 0x8000c62) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000002200)='9', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 323.15µs ago: executing program 3 (id=2788): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x1000, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 9 (id=2789): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffffffffffd15) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) kernel console output (not intermixed with test programs): dit(1771700703.545:1365): avc: denied { ioctl } for pid=11445 comm="syz.5.2095" path="socket:[32920]" dev="sockfs" ino=32920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.188309][T11454] loop1: detected capacity change from 0 to 512 [ 192.207621][ T28] audit: type=1400 audit(1771700703.645:1366): avc: denied { listen } for pid=11445 comm="syz.5.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.312362][ T28] audit: type=1400 audit(1771700703.745:1367): avc: denied { cmd } for pid=11462 comm="syz.9.2100" path="socket:[32949]" dev="sockfs" ino=32949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.437953][T11476] __nla_validate_parse: 2 callbacks suppressed [ 192.438029][T11476] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2104'. [ 192.524563][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.541918][T11447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.572789][T11447] veth1_macvtap: left allmulticast mode [ 192.595435][ T30] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.605062][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.624666][ T310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.632431][ T310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.641863][ T30] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.653268][T11487] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.679934][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.702118][ T30] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.728048][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.772310][ T30] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.791895][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.858836][T11496] loop5: detected capacity change from 0 to 512 [ 192.898249][T11496] EXT4-fs mount: 18 callbacks suppressed [ 192.898271][T11496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.918926][T11496] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.990752][T11496] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2109: bg 0: block 217: padding at end of block bitmap is not set [ 193.038409][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.106947][T11509] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2114'. [ 193.143601][T11511] syzkaller0: entered promiscuous mode [ 193.149203][T11511] syzkaller0: entered allmulticast mode [ 193.213422][T11484] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.259195][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2117'. [ 193.311722][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'. [ 193.366380][T11521] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 193.383859][T11533] loop8: detected capacity change from 0 to 512 [ 193.396126][T11531] netlink: 'syz.5.2121': attribute type 10 has an invalid length. [ 193.440338][T11533] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 193.466077][T11533] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 193.479114][T11531] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2121'. [ 193.532213][T11533] EXT4-fs (loop8): 1 truncate cleaned up [ 193.545120][T11533] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.567022][T11522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.584359][T11522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.608799][T11531] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 193.682708][T11543] binfmt_misc: register: failed to install interpreter file ./file0 [ 193.699541][T11533] tipc: Bearer : already 2 bearers with priority 10 [ 193.713406][T11484] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.714076][T11533] tipc: Bearer : trying with adjusted priority [ 193.734225][T11545] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 193.753724][T11533] tipc: Enabled bearer , priority 9 [ 193.766608][T11533] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=11533 comm=syz.8.2122 [ 193.790813][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2118'. [ 193.807963][ T28] audit: type=1400 audit(1771700705.245:1368): avc: denied { write } for pid=11532 comm="syz.8.2122" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.835124][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2124'. [ 194.310418][ T5060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.574101][ T28] audit: type=1326 audit(1771700706.015:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.9.2132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77c5bbc629 code=0x0 [ 194.597267][T11569] loop8: detected capacity change from 0 to 512 [ 194.604860][T11569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.628111][T11569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.640702][T11569] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.652658][T11578] loop9: detected capacity change from 0 to 512 [ 194.696086][T11578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.817852][T11578] ext4 filesystem being mounted at /345/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.900867][T11585] loop3: detected capacity change from 0 to 512 [ 194.919837][T11587] loop5: detected capacity change from 0 to 2048 [ 194.931257][ T5060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.943265][T11585] FAULT_INJECTION: forcing a failure. [ 194.943265][T11585] name failslab, interval 1, probability 0, space 0, times 0 [ 194.971517][T11585] CPU: 0 UID: 0 PID: 11585 Comm: syz.3.2134 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.971550][T11585] Tainted: [W]=WARN [ 194.971557][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.971569][T11585] Call Trace: [ 194.971578][T11585] [ 194.971587][T11585] __dump_stack+0x1d/0x30 [ 194.971668][T11585] dump_stack_lvl+0x95/0xd0 [ 194.971693][T11585] dump_stack+0x15/0x1b [ 194.971715][T11585] should_fail_ex+0x263/0x280 [ 194.971738][T11585] should_failslab+0x8c/0xb0 [ 194.971779][T11585] kmem_cache_alloc_noprof+0x66/0x400 [ 194.971801][T11585] ? security_file_alloc+0x32/0xf0 [ 194.971878][T11585] security_file_alloc+0x32/0xf0 [ 194.971912][T11585] init_file+0x5b/0x1b0 [ 194.971938][T11585] alloc_empty_file+0x8b/0x200 [ 194.971962][T11585] path_openat+0x65/0x2050 [ 194.972074][T11585] ? _parse_integer_limit+0x170/0x190 [ 194.972189][T11585] ? _parse_integer+0x27/0x40 [ 194.972267][T11585] ? kstrtoull+0x111/0x140 [ 194.972337][T11585] ? kstrtouint+0x76/0xc0 [ 194.972456][T11585] do_file_open+0x16c/0x290 [ 194.972497][T11585] do_sys_openat2+0x94/0x130 [ 194.972525][T11585] __x64_sys_openat+0xf2/0x120 [ 194.972601][T11585] x64_sys_call+0x1e39/0x3020 [ 194.972628][T11585] do_syscall_64+0x12c/0x370 [ 194.972684][T11585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.972706][T11585] RIP: 0033:0x7fe827b3c629 [ 194.972722][T11585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.972904][T11585] RSP: 002b:00007fe82658f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.972924][T11585] RAX: ffffffffffffffda RBX: 00007fe827db5fa0 RCX: 00007fe827b3c629 [ 194.972937][T11585] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 194.972951][T11585] RBP: 00007fe82658f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.972964][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.972976][T11585] R13: 00007fe827db6038 R14: 00007fe827db5fa0 R15: 00007ffeacd534c8 [ 194.972997][T11585] [ 194.983320][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.201109][T11587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.285412][ T28] audit: type=1400 audit(1771700706.715:1370): avc: denied { read } for pid=11586 comm="syz.5.2135" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 195.309160][T11595] loop1: detected capacity change from 0 to 512 [ 195.314075][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.413925][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.534071][T11595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.584466][T11595] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.686442][ T7895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.774957][T11626] loop3: detected capacity change from 0 to 4096 [ 195.784007][T11626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.088575][T11640] IPv6: A: Disabled Multicast RS [ 196.128077][T11642] FAULT_INJECTION: forcing a failure. [ 196.128077][T11642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.197774][T11642] CPU: 1 UID: 0 PID: 11642 Comm: syz.1.2150 Tainted: G W syzkaller #0 PREEMPT(full) [ 196.197814][T11642] Tainted: [W]=WARN [ 196.197823][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.197839][T11642] Call Trace: [ 196.197846][T11642] [ 196.197854][T11642] __dump_stack+0x1d/0x30 [ 196.197929][T11642] dump_stack_lvl+0x95/0xd0 [ 196.197953][T11642] dump_stack+0x15/0x1b [ 196.197981][T11642] should_fail_ex+0x263/0x280 [ 196.198013][T11642] should_fail+0xb/0x20 [ 196.198032][T11642] should_fail_usercopy+0x1a/0x20 [ 196.198133][T11642] _copy_to_user+0x20/0xa0 [ 196.198168][T11642] do_pagemap_cmd+0xb5f/0xc10 [ 196.198224][T11642] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 196.198248][T11642] __se_sys_ioctl+0xce/0x140 [ 196.198352][T11642] __x64_sys_ioctl+0x43/0x50 [ 196.198397][T11642] x64_sys_call+0x1563/0x3020 [ 196.198425][T11642] do_syscall_64+0x12c/0x370 [ 196.198458][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.198534][T11642] RIP: 0033:0x7f9b99b6c629 [ 196.198548][T11642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.198568][T11642] RSP: 002b:00007f9b985bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.198627][T11642] RAX: ffffffffffffffda RBX: 00007f9b99de5fa0 RCX: 00007f9b99b6c629 [ 196.198645][T11642] RDX: 0000200000000140 RSI: 00000000c0606610 RDI: 0000000000000003 [ 196.198659][T11642] RBP: 00007f9b985bf090 R08: 0000000000000000 R09: 0000000000000000 [ 196.198674][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.198687][T11642] R13: 00007f9b99de6038 R14: 00007f9b99de5fa0 R15: 00007ffd7cfe1618 [ 196.198783][T11642] [ 196.514217][T11653] sctp: [Deprecated]: syz.5.2154 (pid 11653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.514217][T11653] Use struct sctp_sack_info instead [ 196.542027][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.551285][T11655] FAULT_INJECTION: forcing a failure. [ 196.551285][T11655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.580844][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.584052][T11655] CPU: 0 UID: 0 PID: 11655 Comm: syz.1.2153 Tainted: G W syzkaller #0 PREEMPT(full) [ 196.584141][T11655] Tainted: [W]=WARN [ 196.584167][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.584243][T11655] Call Trace: [ 196.584272][T11655] [ 196.584292][T11655] __dump_stack+0x1d/0x30 [ 196.584359][T11655] dump_stack_lvl+0x95/0xd0 [ 196.584407][T11655] dump_stack+0x15/0x1b [ 196.584460][T11655] should_fail_ex+0x263/0x280 [ 196.584480][T11655] should_fail+0xb/0x20 [ 196.584548][T11655] should_fail_usercopy+0x1a/0x20 [ 196.584614][T11655] _copy_to_user+0x20/0xa0 [ 196.584684][T11655] simple_read_from_buffer+0xb5/0x130 [ 196.584781][T11655] proc_fail_nth_read+0x10e/0x150 [ 196.584939][T11655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.585021][T11655] vfs_read+0x1ab/0x7f0 [ 196.585102][T11655] ? __rcu_read_unlock+0x4e/0x70 [ 196.585231][T11655] ? __fget_files+0x184/0x1c0 [ 196.585313][T11655] ? mutex_lock+0x57/0x90 [ 196.585394][T11655] ksys_read+0xdc/0x1a0 [ 196.585491][T11655] __x64_sys_read+0x40/0x50 [ 196.585660][T11655] x64_sys_call+0x2886/0x3020 [ 196.585756][T11655] do_syscall_64+0x12c/0x370 [ 196.585878][T11655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.585957][T11655] RIP: 0033:0x7f9b99b2cece [ 196.586013][T11655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.586178][T11655] RSP: 002b:00007f9b985befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.586241][T11655] RAX: ffffffffffffffda RBX: 00007f9b985bf6c0 RCX: 00007f9b99b2cece [ 196.586284][T11655] RDX: 000000000000000f RSI: 00007f9b985bf0a0 RDI: 0000000000000004 [ 196.586359][T11655] RBP: 00007f9b985bf090 R08: 0000000000000000 R09: 0000000000000000 [ 196.586402][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.586444][T11655] R13: 00007f9b99de6038 R14: 00007f9b99de5fa0 R15: 00007ffd7cfe1618 [ 196.586509][T11655] [ 196.683334][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.742911][ T28] audit: type=1326 audit(1771700708.175:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11652 comm="syz.5.2154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x0 [ 196.850659][T11662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=11662 comm=syz.1.2155 [ 196.946661][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2142'. [ 196.983183][T11662] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 196.994845][T11662] erspan1: entered allmulticast mode [ 197.100490][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2155'. [ 197.231633][T11677] loop5: detected capacity change from 0 to 512 [ 197.269908][T11677] EXT4-fs (loop5): 1 orphan inode deleted [ 197.285976][T11365] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.311185][T11677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.333288][T11365] EXT4-fs error (device loop5): ext4_release_dquot:7039: comm kworker/u8:14: Failed to release dquot type 1 [ 197.353270][T11677] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.377267][ T7974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.432546][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.445650][T11681] loop8: detected capacity change from 0 to 512 [ 197.457211][T11683] loop3: detected capacity change from 0 to 512 [ 197.464935][T11681] EXT4-fs: Ignoring removed bh option [ 197.476201][T11681] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 197.522855][T11681] EXT4-fs error (device loop8): ext4_init_orphan_info:620: comm syz.8.2164: orphan file block 0: bad magic [ 197.541813][T11685] hub 9-0:1.0: USB hub found [ 197.548677][T11683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.553422][T11681] loop8: lost filesystem error report for type 5 error -117 [ 197.564851][T11685] hub 9-0:1.0: 8 ports detected [ 197.571792][T11681] EXT4-fs (loop8): Remounting filesystem read-only [ 197.577251][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 197.577274][ C1] EXT4-fs (loop8): initial error at time 1771700709: ext4_init_orphan_info:620 [ 197.577305][ C1] EXT4-fs (loop8): last error at time 1771700709: ext4_init_orphan_info:620 [ 197.626678][T11681] EXT4-fs (loop8): mount failed [ 197.650003][ T7974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.757256][T11698] bridge0: port 4(dummy0) entered blocking state [ 197.763694][T11698] bridge0: port 4(dummy0) entered forwarding state [ 197.778620][T11700] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 197.804331][T11702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2166'. [ 197.823190][T11484] IPVS: starting estimator thread 0... [ 197.843882][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2167'. [ 197.925730][T11704] IPVS: using max 2256 ests per chain, 112800 per kthread [ 198.538399][T11726] set_capacity_and_notify: 1 callbacks suppressed [ 198.538418][T11726] loop5: detected capacity change from 0 to 1024 [ 198.561615][T11726] EXT4-fs: Ignoring removed orlov option [ 198.598374][T11726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.725985][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.807540][T11741] loop5: detected capacity change from 0 to 512 [ 198.897248][T11741] EXT4-fs: Ignoring removed bh option [ 198.911878][T11741] EXT4-fs: inline encryption not supported [ 198.944317][T11741] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.988840][T11733] IPv6: A: Disabled Multicast RS [ 199.038165][T11741] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 199.054564][T11746] syzkaller0: entered promiscuous mode [ 199.060074][T11746] syzkaller0: entered allmulticast mode [ 199.120944][T11746] tipc: Enabled bearer , priority 10 [ 199.128454][T11741] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2175: bg 0: block 248: padding at end of block bitmap is not set [ 199.155966][T11741] loop5: lost filesystem error report for type 5 error -117 [ 199.163068][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 199.176931][ C1] EXT4-fs (loop5): last error at time 1771700710: ext4_validate_block_bitmap:441 [ 199.186945][T11741] Quota error (device loop5): write_blk: dquota write failed [ 199.219435][T11744] tipc: Resetting bearer [ 199.228921][T11759] loop9: detected capacity change from 0 to 512 [ 199.240484][T11744] tipc: Disabling bearer [ 199.254742][T11741] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 199.259462][T11759] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 199.275285][T11759] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 199.294530][T11759] EXT4-fs (loop9): 1 truncate cleaned up [ 199.297807][T11741] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.2175: Failed to acquire dquot type 1 [ 199.312146][T11741] loop5: lost filesystem error report for type 5 error -117 [ 199.312261][T11759] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.341380][T11741] EXT4-fs (loop5): 1 truncate cleaned up [ 199.359834][T11741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 199.475803][T11759] tipc: Started in network mode [ 199.482185][T11759] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 199.512015][T11759] tipc: Enabled bearer , priority 10 [ 199.542769][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 199.608619][T11759] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 199.654762][T11791] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2183'. [ 199.667133][T11794] loop8: detected capacity change from 0 to 128 [ 199.703660][T11794] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.725706][T11781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=11781 comm=syz.9.2179 [ 199.754054][T11794] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.817772][ T28] audit: type=1400 audit(1771700711.255:1372): avc: denied { bind } for pid=11797 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.862865][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2187'. [ 199.904977][ T28] audit: type=1400 audit(1771700711.315:1373): avc: denied { write } for pid=11797 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.032605][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2191'. [ 200.065656][T11819] bond0: entered promiscuous mode [ 200.070811][T11819] bond_slave_0: entered promiscuous mode [ 200.097155][T11819] bond_slave_1: entered promiscuous mode [ 200.105000][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.114261][T11819] geneve1: entered promiscuous mode [ 200.134147][T11819] gretap0: entered promiscuous mode [ 200.140190][T11819] hsr1: entered promiscuous mode [ 200.275205][T11794] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2184'. [ 200.623114][ T848] tipc: Node number set to 10070698 [ 200.707378][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.790485][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.840245][ T848] IPVS: starting estimator thread 0... [ 200.848245][T11846] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 200.860683][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2190'. [ 200.973136][T11848] IPVS: using max 2304 ests per chain, 115200 per kthread [ 201.027584][ T28] audit: type=1400 audit(1771700712.465:1374): avc: denied { setopt } for pid=11857 comm="syz.8.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.226848][T11871] loop1: detected capacity change from 0 to 256 [ 201.526335][T11882] loop5: detected capacity change from 0 to 512 [ 201.558174][T11882] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2207: inode has both inline data and extents flags [ 201.642771][T11882] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.649130][T11882] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2207: couldn't read orphan inode 15 (err -117) [ 201.658339][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 201.658355][ C0] EXT4-fs (loop5): initial error at time 1771700713: ext4_orphan_get:1391: inode 15 [ 201.658379][ C0] EXT4-fs (loop5): last error at time 1771700713: ext4_orphan_get:1391: inode 15 [ 201.733486][T11882] loop5: lost filesystem error report for type 5 error -117 [ 201.734024][T11882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 201.824493][T11886] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 201.832639][T11888] futex_wake_op: syz.3.2209 tries to shift op by 36; fix this program [ 201.930523][T11893] FAULT_INJECTION: forcing a failure. [ 201.930523][T11893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.959779][T11893] CPU: 0 UID: 0 PID: 11893 Comm: syz.8.2212 Tainted: G W syzkaller #0 PREEMPT(full) [ 201.959819][T11893] Tainted: [W]=WARN [ 201.959827][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.959856][T11893] Call Trace: [ 201.959882][T11893] [ 201.959891][T11893] __dump_stack+0x1d/0x30 [ 201.959939][T11893] dump_stack_lvl+0x95/0xd0 [ 201.960045][T11893] dump_stack+0x15/0x1b [ 201.960152][T11893] should_fail_ex+0x263/0x280 [ 201.960182][T11893] should_fail_alloc_page+0xf2/0x100 [ 201.960211][T11893] __alloc_frozen_pages_noprof+0x108/0x360 [ 201.960250][T11893] alloc_pages_mpol+0xb3/0x260 [ 201.960351][T11893] ? css_rstat_updated+0xbb/0x280 [ 201.960381][T11893] vma_alloc_folio_noprof+0x1a9/0x300 [ 201.960423][T11893] handle_mm_fault+0x111f/0x3020 [ 201.960465][T11893] ? vma_start_read+0x1c7/0x2c0 [ 201.960542][T11893] do_user_addr_fault+0x62f/0x1050 [ 201.960615][T11893] ? arch_exit_work+0x30/0x40 [ 201.960641][T11893] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 201.960708][T11893] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 201.960746][T11893] ? trace_page_fault_user+0x1f/0xe0 [ 201.960780][T11893] exc_page_fault+0x62/0xa0 [ 201.960864][T11893] asm_exc_page_fault+0x26/0x30 [ 201.960889][T11893] RIP: 0033:0x7fba376f3b18 [ 201.960909][T11893] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 201.960928][T11893] RSP: 002b:00007fba3628e470 EFLAGS: 00010206 [ 201.960947][T11893] RAX: 000000000000f000 RBX: 00007fba3628e530 RCX: 0000000000000021 [ 201.961031][T11893] RDX: 0000000000002763 RSI: 0000000000006764 RDI: 00007fba3628e5d0 [ 201.961119][T11893] RBP: 0000000000000022 R08: 00007fba2de6f000 R09: 0000000000000022 [ 201.961156][T11893] R10: 0000200000000d42 R11: 00000000000007a9 R12: 0000000000006001 [ 201.961173][T11893] R13: 00007fba378f2200 R14: 000000000000001d R15: 00007fba3628e5d0 [ 201.961218][T11893] [ 201.962475][T11893] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 202.091724][T11892] loop9: detected capacity change from 0 to 1024 [ 202.198857][T11893] loop8: detected capacity change from 0 to 764 [ 202.243992][T11893] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 202.341540][T11892] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.418080][T11907] loop8: detected capacity change from 0 to 512 [ 202.427752][T11892] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.465484][T11907] EXT4-fs: Ignoring removed bh option [ 202.498711][T11907] EXT4-fs: inline encryption not supported [ 202.530415][T11892] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 3: comm syz.9.2211: lblock 3 mapped to illegal pblock 3 (length 3) [ 202.537241][T11907] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.559552][T11892] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 202.585733][T11892] EXT4-fs (loop9): This should not happen!! Data will be lost [ 202.585733][T11892] [ 202.587470][T11907] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 202.633212][ T322] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 202.675046][T11907] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2215: bg 0: block 248: padding at end of block bitmap is not set [ 202.693112][ T322] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 202.713161][T11907] loop8: lost filesystem error report for type 5 error -117 [ 202.713323][ T322] EXT4-fs (loop9): This should not happen!! Data will be lost [ 202.713323][ T322] [ 202.730413][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 202.730438][ C1] EXT4-fs (loop8): last error at time 1771700714: ext4_validate_block_bitmap:441 [ 202.737428][T11907] Quota error (device loop8): write_blk: dquota write failed [ 202.759319][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.773122][T11907] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 202.783463][T11907] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.2215: Failed to acquire dquot type 1 [ 202.829436][T11907] loop8: lost filesystem error report for type 5 error -117 [ 202.830083][T11907] EXT4-fs (loop8): 1 truncate cleaned up [ 202.860329][T11907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 202.919733][ T28] audit: type=1400 audit(1771700714.355:1375): avc: denied { write } for pid=11901 comm="syz.8.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.958756][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 203.008174][ T5060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 203.113674][T11949] netlink: 'syz.3.2223': attribute type 10 has an invalid length. [ 203.121743][T11949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2223'. [ 203.237952][ T28] audit: type=1400 audit(1771700714.675:1376): avc: denied { bind } for pid=11954 comm="syz.8.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.306675][T11961] loop8: detected capacity change from 0 to 128 [ 203.311356][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 203.354343][T11963] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2229'. [ 203.601920][ T28] audit: type=1400 audit(1771700715.025:1377): avc: denied { map } for pid=11975 comm="syz.1.2234" path="socket:[33629]" dev="sockfs" ino=33629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.653167][ T28] audit: type=1400 audit(1771700715.025:1378): avc: denied { accept } for pid=11975 comm="syz.1.2234" path="socket:[33629]" dev="sockfs" ino=33629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.749607][T11986] loop1: detected capacity change from 0 to 128 [ 203.800162][T11988] loop9: detected capacity change from 0 to 512 [ 203.837114][T11988] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.900497][T11994] tc_dump_action: action bad kind [ 203.915106][T11988] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.941796][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2238'. [ 204.004850][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.044304][T12003] loop5: detected capacity change from 0 to 512 [ 204.082343][T12007] loop9: detected capacity change from 0 to 128 [ 204.206951][T12014] loop5: detected capacity change from 0 to 2048 [ 204.227253][T12017] loop9: detected capacity change from 0 to 512 [ 204.263845][T12014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.296430][T12017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.343154][T12017] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.386588][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.398326][T11999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.413117][T11999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.423955][ T28] audit: type=1400 audit(1771700715.865:1379): avc: denied { name_connect } for pid=12013 comm="syz.5.2247" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 204.493832][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 204.583124][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.647732][T12049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.656249][T12049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.665224][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2250'. [ 204.674690][T12049] xt_hashlimit: size too large, truncated to 1048576 [ 205.075666][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.142878][T12066] syzkaller0: entered promiscuous mode [ 205.149050][T12066] syzkaller0: entered allmulticast mode [ 205.161196][T12068] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2258'. [ 207.469312][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2267'. [ 207.524262][T12086] netlink: 'syz.8.2266': attribute type 10 has an invalid length. [ 207.532231][T12086] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2266'. [ 207.707847][T12099] netlink: 'syz.8.2273': attribute type 10 has an invalid length. [ 207.734662][T12095] loop1: detected capacity change from 0 to 8192 [ 207.744708][T12099] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2273'. [ 207.768740][T12097] IPVS: You probably need to specify IP address on multicast interface. [ 207.792590][T12097] IPVS: Error connecting to the multicast addr [ 207.895579][T12110] loop9: detected capacity change from 0 to 512 [ 207.910668][T12106] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 207.929719][T12110] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.939411][T12110] EXT4-fs (loop9): filesystem is read-only [ 208.045814][T12120] loop9: detected capacity change from 0 to 512 [ 208.121046][ T28] audit: type=1326 audit(1771700719.555:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12114 comm="syz.8.2279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba3783c629 code=0x0 [ 208.158444][T12120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.173607][T12130] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2281'. [ 208.180846][T12120] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.188942][T12104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.222062][ T28] audit: type=1400 audit(1771700719.645:1381): avc: denied { associate } for pid=12119 comm="syz.9.2280" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 208.256309][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.264650][T12104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.273219][ T28] audit: type=1400 audit(1771700719.705:1382): avc: denied { setopt } for pid=12132 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.293905][ T28] audit: type=1400 audit(1771700719.705:1383): avc: denied { getopt } for pid=12132 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.315224][ T28] audit: type=1400 audit(1771700719.705:1384): avc: denied { getopt } for pid=12132 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 208.366619][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 208.378282][T12139] loop9: detected capacity change from 0 to 1024 [ 208.401298][T12139] EXT4-fs: Ignoring removed orlov option [ 208.457077][T12139] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.516269][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.618484][T12156] syzkaller0: entered promiscuous mode [ 208.624362][T12156] syzkaller0: entered allmulticast mode [ 208.631834][T12156] tipc: Enabled bearer , priority 10 [ 208.639206][T12155] tipc: Resetting bearer [ 208.658718][T12155] tipc: Disabling bearer [ 208.743932][T12160] netlink: 'syz.9.2293': attribute type 10 has an invalid length. [ 208.765360][T12160] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2293'. [ 208.796701][T12163] xt_TCPMSS: Only works on TCP SYN packets [ 208.816192][T12165] set_capacity_and_notify: 1 callbacks suppressed [ 208.816212][T12165] loop9: detected capacity change from 0 to 1024 [ 208.934442][T12168] bridge0: entered allmulticast mode [ 208.950733][T12168] loop1: detected capacity change from 0 to 512 [ 208.959998][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2296'. [ 208.974410][T12168] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 209.013828][T12171] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2296'. [ 209.050204][T12173] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2296'. [ 209.077713][T12168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 209.090827][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2296'. [ 209.101136][T12168] System zones: 1-12 [ 209.113509][T12168] EXT4-fs (loop1): orphan cleanup on readonly fs [ 209.173727][T12168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2297: bg 0: block 361: padding at end of block bitmap is not set [ 209.241422][T12168] loop1: lost filesystem error report for type 5 error -117 [ 209.241665][T12168] EXT4-fs (loop1): Remounting filesystem read-only [ 209.245929][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2296'. [ 209.255569][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 209.255589][ C1] EXT4-fs (loop1): initial error at time 1771700720: ext4_validate_block_bitmap:441 [ 209.255621][ C1] EXT4-fs (loop1): last error at time 1771700720: ext4_validate_block_bitmap:441 [ 209.275504][T12168] EXT4-fs (loop1): 1 truncate cleaned up [ 209.291571][T12163] loop8: detected capacity change from 0 to 2048 [ 209.328976][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2299'. [ 209.345796][T12168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 209.431106][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 209.440639][T12183] bridge0: port 3(dummy0) entered disabled state [ 209.451125][T12183] bridge_slave_1: left allmulticast mode [ 209.456996][T12183] bridge_slave_1: left promiscuous mode [ 209.479520][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.535017][T12183] bridge_slave_0: left allmulticast mode [ 209.546412][T12163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.567207][T12195] loop9: detected capacity change from 0 to 512 [ 209.575102][T12183] bridge_slave_0: left promiscuous mode [ 209.580824][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.593837][T12195] ext4: Unknown parameter 'hash' [ 209.614544][T12183] bridge0 (unregistering): left allmulticast mode [ 209.652714][T12200] loop3: detected capacity change from 0 to 512 [ 209.670008][T12200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.688289][T12200] EXT4-fs (loop3): 1 truncate cleaned up [ 209.695720][T12200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.710768][ T28] audit: type=1400 audit(1771700721.155:1385): avc: denied { create } for pid=12199 comm="syz.3.2306" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 209.731478][T12200] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.2306: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 209.752496][ T28] audit: type=1400 audit(1771700721.175:1386): avc: denied { rmdir } for pid=12199 comm="syz.3.2306" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 209.775081][ T7895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 209.784630][T12200] EXT4-fs error (device loop3) in ext4_delete_entry:2737: Corrupt filesystem [ 209.880953][T12211] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.2306: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 209.909053][ T28] audit: type=1400 audit(1771700721.345:1387): avc: denied { shutdown } for pid=12162 comm="syz.8.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.051398][ T7974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.061601][ T5060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.102300][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.143455][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.192702][T12227] netlink: 'syz.3.2315': attribute type 10 has an invalid length. [ 210.216241][T12229] tipc: Enabling of bearer rejected, failed to enable media [ 210.301718][T12236] syzkaller0: entered promiscuous mode [ 210.338719][T12236] syzkaller0: entered allmulticast mode [ 210.375533][T12239] loop3: detected capacity change from 0 to 512 [ 210.401684][T12243] Non-string source [ 210.431732][T12239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.445841][T12239] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.480549][T12239] bridge2: entered promiscuous mode [ 210.490433][T12239] bridge2: entered allmulticast mode [ 210.515765][T12249] loop5: detected capacity change from 0 to 1024 [ 210.532242][T12249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.566420][T12247] ------------[ cut here ]------------ [ 210.571920][T12247] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 210.596581][T12247] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.9.2321/12247 [ 210.607697][T12247] Modules linked in: [ 210.611674][T12247] CPU: 0 UID: 0 PID: 12247 Comm: syz.9.2321 Tainted: G W syzkaller #0 PREEMPT(full) [ 210.622729][T12247] Tainted: [W]=WARN [ 210.626598][T12247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.636756][T12247] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 210.643064][T12247] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 210.662755][T12247] RSP: 0018:ffffc90001fff368 EFLAGS: 00010246 [ 210.668893][T12247] RAX: ffff88810485ab78 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 210.677065][T12247] RDX: ffffffff86817442 RSI: ffffffff866d8f34 RDI: ffffffff871d3f90 [ 210.685131][T12247] RBP: ffff88811850f270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 210.693182][T12247] R10: ffffffff893d3a00 R11: 00000000ffffdfcc R12: ffff88811850f230 [ 210.701233][T12247] R13: 00000000ffffdfcc R14: ffff88811850f27c R15: ffff88811850f268 [ 210.709449][T12247] FS: 00007f77c46176c0(0000) GS:ffff8882ae8da000(0000) knlGS:0000000000000000 [ 210.718616][T12247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.725348][T12247] CR2: 0000200000001000 CR3: 000000014669e000 CR4: 00000000003506f0 [ 210.733392][T12247] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.741454][T12247] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 210.749493][T12247] Call Trace: [ 210.752797][T12247] [ 210.755781][T12247] reg_set_min_max+0x1c8/0x260 [ 210.760623][T12247] check_cond_jmp_op+0x13b0/0x1ab0 [ 210.765807][T12247] do_check+0x4a9b/0x9860 [ 210.770238][T12247] do_check_common+0xd0b/0x1630 [ 210.775146][T12247] bpf_check+0x2f78/0xcc30 [ 210.779679][T12247] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 210.785867][T12247] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 210.791599][T12247] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 210.797575][T12247] ? pcpu_block_update+0x24e/0x3b0 [ 210.802736][T12247] ? _find_next_zero_bit+0x64/0xa0 [ 210.807964][T12247] ? pcpu_block_refresh_hint+0x157/0x170 [ 210.813716][T12247] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 210.819870][T12247] ? css_rstat_updated+0xbb/0x280 [ 210.825133][T12247] ? mod_memcg_state+0x182/0x270 [ 210.830228][T12247] ? __rcu_read_unlock+0x4e/0x70 [ 210.835362][T12247] ? avc_has_perm_noaudit+0xab/0x130 [ 210.840729][T12247] ? avc_has_perm+0x101/0x190 [ 210.845470][T12247] ? selinux_bpf_prog_load+0x197/0x1c0 [ 210.850961][T12247] ? security_bpf_prog_load+0x9e/0x140 [ 210.856486][T12247] bpf_prog_load+0xf76/0x1140 [ 210.861274][T12247] ? security_bpf+0x2b/0x90 [ 210.865904][T12247] __sys_bpf+0x505/0x7e0 [ 210.870207][T12247] __x64_sys_bpf+0x41/0x50 [ 210.874760][T12247] x64_sys_call+0x10cb/0x3020 [ 210.879491][T12247] do_syscall_64+0x12c/0x370 [ 210.884283][T12247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.890280][T12247] RIP: 0033:0x7f77c5bbc629 [ 210.895103][T12247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.915025][T12247] RSP: 002b:00007f77c4617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.923578][T12247] RAX: ffffffffffffffda RBX: 00007f77c5e35fa0 RCX: 00007f77c5bbc629 [ 210.931578][T12247] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 210.939649][T12247] RBP: 00007f77c5c52b39 R08: 0000000000000000 R09: 0000000000000000 [ 210.947683][T12247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.955745][T12247] R13: 00007f77c5e36038 R14: 00007f77c5e35fa0 R15: 00007ffc686e62a8 [ 210.963846][T12247] [ 210.966895][T12247] ---[ end trace 0000000000000000 ]--- [ 211.026630][T12255] netlink: 'syz.5.2322': attribute type 10 has an invalid length. [ 211.096594][T12255] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 211.134624][ T7974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.241428][T12268] loop3: detected capacity change from 0 to 512 [ 211.280153][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.309915][T12268] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.343773][T12268] bridge2: entered promiscuous mode [ 211.349144][T12268] bridge2: entered allmulticast mode [ 211.395348][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.464475][T12274] netlink: 'syz.1.2330': attribute type 4 has an invalid length. [ 211.482000][T12274] netlink: 'syz.1.2330': attribute type 4 has an invalid length. [ 211.542009][ T7974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.552692][T12281] loop5: detected capacity change from 0 to 128 [ 211.560718][T12279] macvlan3: entered allmulticast mode [ 211.577296][T12279] vlan1: entered allmulticast mode [ 211.619233][T12279] veth0_vlan: entered allmulticast mode [ 211.680961][T12286] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 211.698447][T12286] FAT-fs (loop5): Filesystem has been set read-only [ 212.066408][T12307] loop8: detected capacity change from 0 to 2048 [ 212.166620][T12293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.191909][T12293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.247984][T12310] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.261188][T12323] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.306058][T12323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.320849][T12323] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.350468][ T28] audit: type=1400 audit(1771700723.785:1388): avc: denied { write } for pid=12327 comm="syz.3.2347" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.444988][T12323] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.2345: corrupted xattr block 6: invalid header [ 212.458986][T12323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 212.468370][T12323] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.2345: corrupted xattr block 6: invalid header [ 212.484281][T12323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 212.493834][ T28] audit: type=1400 audit(1771700723.935:1389): avc: denied { mounton } for pid=12319 comm="syz.9.2345" path="/386/file0/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.601971][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.706295][T12352] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 212.718431][T12352] EXT4-fs (loop9): 1 truncate cleaned up [ 212.738434][T12352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.845928][T12352] EXT4-fs error (device loop9): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.9.2354: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 213.007056][T12352] EXT4-fs error (device loop9) in ext4_delete_entry:2737: Corrupt filesystem [ 213.213825][T12352] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.2354: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 213.332399][T12363] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 213.340674][T12363] __nla_validate_parse: 8 callbacks suppressed [ 213.340751][T12363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 213.357808][T12365] xt_TCPMSS: Only works on TCP SYN packets [ 213.399617][ T5060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.417936][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.444142][T12365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.547810][T12370] hub 9-0:1.0: USB hub found [ 213.564004][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.586234][T12370] hub 9-0:1.0: 8 ports detected [ 213.613279][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.713539][T12382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.722863][ T28] audit: type=1400 audit(1771700725.145:1390): avc: denied { block_suspend } for pid=12360 comm="syz.5.2356" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.726222][T12382] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.764116][T12382] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2363: corrupted xattr block 33: overlapping e_value [ 213.800678][T12382] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 213.809894][T12382] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.2363: corrupted xattr block 33: overlapping e_value [ 213.825974][T12382] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 213.844373][T12388] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 213.870817][ T7974] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.901312][T12386] set_capacity_and_notify: 6 callbacks suppressed [ 213.901328][T12386] loop9: detected capacity change from 0 to 1024 [ 213.910791][T12390] loop8: detected capacity change from 0 to 1024 [ 213.915811][T12386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.932483][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.951436][T12390] EXT4-fs: inline encryption not supported [ 213.958230][T12386] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.006792][T12390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.019862][T12386] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 214.035012][T12386] System zones: 0-1, 3-36 [ 214.044982][T12386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.064188][ T28] audit: type=1400 audit(1771700725.495:1391): avc: denied { create } for pid=12389 comm="syz.8.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.064274][T12386] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 214.112745][ T28] audit: type=1400 audit(1771700725.495:1392): avc: denied { bind } for pid=12389 comm="syz.8.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.170478][T12404] loop5: detected capacity change from 0 to 512 [ 214.191682][T12406] FAULT_INJECTION: forcing a failure. [ 214.191682][T12406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.213762][T12406] CPU: 1 UID: 0 PID: 12406 Comm: syz.1.2371 Tainted: G W syzkaller #0 PREEMPT(full) [ 214.213809][T12406] Tainted: [W]=WARN [ 214.213815][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.213827][T12406] Call Trace: [ 214.213859][T12406] [ 214.213868][T12406] __dump_stack+0x1d/0x30 [ 214.213941][T12406] dump_stack_lvl+0x95/0xd0 [ 214.213967][T12406] dump_stack+0x15/0x1b [ 214.213987][T12406] should_fail_ex+0x263/0x280 [ 214.214008][T12406] should_fail_alloc_page+0xf2/0x100 [ 214.214052][T12406] __alloc_frozen_pages_noprof+0x108/0x360 [ 214.214090][T12406] alloc_pages_mpol+0xb3/0x260 [ 214.214119][T12406] ? css_rstat_updated+0xbb/0x280 [ 214.214174][T12404] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 214.214195][T12406] vma_alloc_folio_noprof+0x1a9/0x300 [ 214.214351][T12406] handle_mm_fault+0x111f/0x3020 [ 214.214575][T12406] ? vma_start_read+0x1c7/0x2c0 [ 214.214713][T12406] do_user_addr_fault+0x62f/0x1050 [ 214.214837][T12406] ? ksys_mmap_pgoff+0xc1/0x310 [ 214.214932][T12406] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 214.215034][T12406] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 214.215185][T12406] ? trace_page_fault_user+0x1f/0xe0 [ 214.215306][T12406] exc_page_fault+0x62/0xa0 [ 214.215454][T12406] asm_exc_page_fault+0x26/0x30 [ 214.215611][T12406] RIP: 0033:0x7f9b99a23a63 [ 214.215660][T12406] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 214.215794][T12406] RSP: 002b:00007f9b985be470 EFLAGS: 00010202 [ 214.215849][T12406] RAX: 000000000000c000 RBX: 00007f9b985be530 RCX: 00007f9b9019f000 [ 214.215887][T12406] RDX: 00007f9b985be6d0 RSI: 0000000000000001 RDI: 00007f9b985be5d0 [ 214.215952][T12406] RBP: 0000000000000046 R08: 0000000000000006 R09: 000000000000001e [ 214.215989][T12406] R10: 0000000000000024 R11: 00007f9b985be530 R12: 0000000000000001 [ 214.216027][T12406] R13: 00007f9b99c22200 R14: 0000000000000001 R15: 00007f9b985be5d0 [ 214.216090][T12406] [ 214.216119][T12406] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 214.353204][T12404] EXT4-fs (loop5): 1 truncate cleaned up [ 214.400681][T12406] loop1: detected capacity change from 0 to 764 [ 214.457464][T12404] EXT4-fs error (device loop5): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.5.2370: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 214.477805][T12406] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 214.507996][T12404] EXT4-fs error (device loop5) in ext4_delete_entry:2737: Corrupt filesystem [ 214.548681][T12412] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 214.575687][T12395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.584394][T12395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.625071][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2366'. [ 214.640548][T12404] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.2370: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 214.665193][T12418] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.676939][T12418] team0: Device macvlan2 is already an upper device of the team interface [ 214.728074][T12419] syzkaller0: entered promiscuous mode [ 214.736046][T12419] syzkaller0: entered allmulticast mode [ 215.429219][ T28] audit: type=1326 audit(1771700726.865:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12425 comm="syz.8.2376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba3783c629 code=0x0 [ 215.482361][T12429] loop8: detected capacity change from 0 to 512 [ 215.586892][T12429] ext4 filesystem being mounted at /355/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.779199][T12435] loop9: detected capacity change from 0 to 512 [ 215.834077][T12435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 215.842142][T12435] System zones: 1-12 [ 215.853327][T12435] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.2375: missing EA_INODE flag [ 215.871615][T12435] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 215.871744][T12435] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2375: error while reading EA inode 12 err=-117 [ 215.881048][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 215.881071][ C1] EXT4-fs (loop9): initial error at time 1771700727: ext4_xattr_inode_iget:441: inode 12 [ 215.881094][ C1] EXT4-fs (loop9): last error at time 1771700727: ext4_xattr_inode_iget:441: inode 12 [ 215.922033][T12435] loop9: lost filesystem error report for type 5 error -117 [ 215.922241][T12435] EXT4-fs (loop9): 1 orphan inode deleted [ 215.948544][T12434] loop5: detected capacity change from 0 to 1024 [ 215.981513][T12434] ext4: Bad value for 'min_batch_time' [ 215.992132][T12442] loop9: detected capacity change from 0 to 128 [ 216.012578][T12442] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.064064][T12434] usb usb8: usbfs: process 12434 (syz.5.2374) did not claim interface 14 before use [ 216.085367][T12442] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.268035][T12445] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2380'. [ 216.329779][T12446] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2379'. [ 216.357919][ T28] audit: type=1400 audit(1771700727.795:1394): avc: denied { accept } for pid=12444 comm="syz.5.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.730675][T12450] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2382'. [ 216.806242][T12452] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 216.830823][T12454] vlan2: entered allmulticast mode [ 216.868581][T12456] lo: left promiscuous mode [ 216.873543][T12456] lo: left allmulticast mode [ 216.880147][T12456] dummy0: left promiscuous mode [ 216.885419][T12456] dummy0: left allmulticast mode [ 216.902252][T11928] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.987567][T12456] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 217.279775][T12472] netlink: 'syz.5.2391': attribute type 10 has an invalid length. [ 217.292748][T12472] geneve1: entered promiscuous mode [ 217.353399][T12474] loop5: detected capacity change from 0 to 256 [ 217.604054][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.612589][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.714558][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2388'. [ 217.770047][T12462] loop1: detected capacity change from 0 to 736 [ 218.157814][T12467] syz.3.2387 (12467) used greatest stack depth: 5968 bytes left [ 218.206882][T12507] syzkaller0: entered promiscuous mode [ 218.212433][T12507] syzkaller0: entered allmulticast mode [ 218.319528][T12517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2408'. [ 218.432284][T12523] EXT4-fs: Ignoring removed nobh option [ 218.466119][T12523] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 1: comm syz.5.2410: invalid block [ 218.503837][T12523] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 218.504104][T12523] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2410: couldn't read orphan inode 11 (err -117) [ 218.513308][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 218.513331][ C0] EXT4-fs (loop5): initial error at time 1771700729: __ext4_iget:5378: inode 11: block 1 [ 218.513376][ C0] EXT4-fs (loop5): last error at time 1771700729: __ext4_iget:5378: inode 11: block 1 [ 218.568922][T12532] hub 9-0:1.0: USB hub found [ 218.574446][T12532] hub 9-0:1.0: 8 ports detected [ 218.613609][T12523] loop5: lost filesystem error report for type 5 error -117 [ 218.627396][T12540] netlink: 'syz.9.2419': attribute type 10 has an invalid length. [ 218.661989][T12538] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 218.681480][T12540] geneve1: entered promiscuous mode [ 218.922474][T12558] netlink: 'syz.5.2425': attribute type 10 has an invalid length. [ 218.933150][T12552] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.933764][T12558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2425'. [ 218.969836][T12564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2427'. [ 218.980999][T12558] dummy0: entered promiscuous mode [ 218.994779][T12558] dummy0: entered allmulticast mode [ 219.007349][T12558] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 219.037864][T12566] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2427'. [ 219.061176][T12552] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.096946][T12568] set_capacity_and_notify: 1 callbacks suppressed [ 219.096965][T12568] loop5: detected capacity change from 0 to 512 [ 219.098258][T12569] loop1: detected capacity change from 0 to 512 [ 219.123810][T12568] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 219.148619][T12568] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2428: bg 0: block 255: padding at end of block bitmap is not set [ 219.164501][T12569] EXT4-fs: Ignoring removed bh option [ 219.175292][T12569] EXT4-fs: inline encryption not supported [ 219.187051][T12568] loop5: lost filesystem error report for type 5 error -117 [ 219.187148][T12569] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.187488][T12568] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 219.203682][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 219.203703][ C1] EXT4-fs (loop5): initial error at time 1771700730: ext4_validate_block_bitmap:441 [ 219.203728][ C1] EXT4-fs (loop5): last error at time 1771700730: ext4_validate_block_bitmap:441 [ 219.246622][T12568] loop5: lost filesystem error report for type 5 error -117 [ 219.246861][T12568] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2428: invalid indirect mapped block 1 (level 1) [ 219.267543][T12569] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 219.268619][T12568] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.283795][T12569] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2427: bg 0: block 248: padding at end of block bitmap is not set [ 219.285187][T12568] EXT4-fs (loop5): 1 truncate cleaned up [ 219.298956][T12569] loop1: lost filesystem error report for type 5 error -117 [ 219.313440][T12569] Quota error (device loop1): write_blk: dquota write failed [ 219.328198][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 219.328234][ C1] EXT4-fs (loop1): last error at time 1771700730: ext4_validate_block_bitmap:441 [ 219.346068][T12569] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 219.356624][T12569] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2427: Failed to acquire dquot type 1 [ 219.358682][T12552] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.368807][T12569] loop1: lost filesystem error report for type 5 error -117 [ 219.378925][T12569] EXT4-fs (loop1): 1 truncate cleaned up [ 219.392551][ T28] audit: type=1400 audit(1771700730.801:1395): avc: denied { ioctl } for pid=12567 comm="syz.5.2428" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.491812][T12577] loop5: detected capacity change from 0 to 256 [ 219.499595][T12552] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.595444][ T28] audit: type=1326 audit(1771700730.988:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 219.625768][T12581] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 219.658254][ T28] audit: type=1326 audit(1771700730.988:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 219.715761][ T28] audit: type=1326 audit(1771700730.988:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 219.745475][ T28] audit: type=1326 audit(1771700730.988:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 219.769399][ T28] audit: type=1326 audit(1771700730.988:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 219.793125][ T28] audit: type=1326 audit(1771700730.988:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 219.858539][T12588] SELinux: Context system_u:object_r:init_var_run_t:s0 is not valid (left unmapped). [ 219.879237][T11928] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.880890][ T28] audit: type=1326 audit(1771700730.988:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 219.906396][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2436'. [ 219.921234][T12586] netlink: 'syz.8.2434': attribute type 4 has an invalid length. [ 219.964833][T11928] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.966529][T12586] netlink: 'syz.8.2434': attribute type 4 has an invalid length. [ 219.988046][T11928] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.010418][T11928] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.071171][T12605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3857 sclass=netlink_route_socket pid=12605 comm=syz.3.2438 [ 220.113147][T12609] loop8: detected capacity change from 0 to 512 [ 220.157233][T12610] loop5: detected capacity change from 0 to 256 [ 220.169068][T12613] loop9: detected capacity change from 0 to 764 [ 220.175868][T12613] iso9660: Unknown parameter 'iocharsturkish' [ 220.194277][T12615] loop8: detected capacity change from 0 to 128 [ 220.550466][T12625] loop1: detected capacity change from 0 to 512 [ 220.584189][T12625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.607369][T12625] EXT4-fs (loop1): 1 truncate cleaned up [ 220.615693][T12625] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.2445: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 220.637936][T12625] EXT4-fs error (device loop1) in ext4_delete_entry:2737: Corrupt filesystem [ 220.730319][T12629] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.2445: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 221.386852][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.435870][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.444470][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.895910][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.905886][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.946991][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.955678][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.981209][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'. [ 222.565287][T12673] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2457'. [ 222.611585][T12675] netlink: 'syz.1.2458': attribute type 10 has an invalid length. [ 222.619639][T12675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2458'. [ 222.630173][T12675] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 222.701663][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2461'. [ 222.710844][T12682] macvlan1: entered allmulticast mode [ 222.720796][T12682] veth1_vlan: entered allmulticast mode [ 222.728509][T12686] netlink: 'syz.1.2462': attribute type 2 has an invalid length. [ 222.736997][T12686] netlink: 'syz.1.2462': attribute type 4 has an invalid length. [ 222.744967][T12686] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2462'. [ 222.938430][T12692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.947110][T12692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.007003][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2466'. [ 223.016268][T12699] netlink: 'syz.8.2466': attribute type 1 has an invalid length. [ 223.024744][T12699] netlink: 'syz.8.2466': attribute type 1 has an invalid length. [ 223.118250][T12708] loop8: detected capacity change from 0 to 512 [ 223.125978][T12708] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 223.137443][T12708] EXT4-fs (loop8): 1 truncate cleaned up [ 223.144822][T12708] EXT4-fs error (device loop8): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.8.2469: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 223.167619][T12708] EXT4-fs error (device loop8) in ext4_delete_entry:2737: Corrupt filesystem [ 223.246599][T12716] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2469: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 223.267344][T12716] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.2469: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 223.315382][T12718] loop9: detected capacity change from 0 to 512 [ 223.396133][T12718] FAT-fs (loop9): error, invalid access to FAT (entry 0x000000c8) [ 223.446280][ T5060] EXT4-fs unmount: 17 callbacks suppressed [ 223.446301][ T5060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.539164][T12724] program syz.8.2474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.579735][T12728] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 223.735475][T12746] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.751612][T12746] EXT4-fs (loop1): 1 truncate cleaned up [ 223.757894][T12746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.780518][T12746] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.2484: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 223.832553][T12746] EXT4-fs error (device loop1) in ext4_delete_entry:2737: Corrupt filesystem [ 223.991938][T12750] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.2484: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 224.043142][T12750] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.2484: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 224.191615][T12770] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.213243][T12770] ext4 filesystem being mounted at /410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.299873][ T7895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.311185][T12777] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.2488: No space for directory leaf checksum. Please run e2fsck -D. [ 224.336036][T12777] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.2488: Directory block failed checksum [ 224.458045][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.466884][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.502193][T12791] FAULT_INJECTION: forcing a failure. [ 224.502193][T12791] name failslab, interval 1, probability 0, space 0, times 0 [ 224.520105][T12791] CPU: 0 UID: 0 PID: 12791 Comm: syz.1.2493 Tainted: G W syzkaller #0 PREEMPT(full) [ 224.520149][T12791] Tainted: [W]=WARN [ 224.520158][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.520175][T12791] Call Trace: [ 224.520227][T12791] [ 224.520235][T12791] __dump_stack+0x1d/0x30 [ 224.520261][T12791] dump_stack_lvl+0x95/0xd0 [ 224.520290][T12791] dump_stack+0x15/0x1b [ 224.520386][T12791] should_fail_ex+0x263/0x280 [ 224.520416][T12791] should_failslab+0x8c/0xb0 [ 224.520442][T12791] kmem_cache_alloc_noprof+0x66/0x400 [ 224.520470][T12791] ? __break_lease+0x100/0xea0 [ 224.520498][T12791] __break_lease+0x100/0xea0 [ 224.520573][T12791] ? _raw_spin_unlock+0x9/0x30 [ 224.520600][T12791] ? __dentry_kill+0x3b8/0x460 [ 224.520645][T12791] path_openat+0x1293/0x2050 [ 224.520726][T12791] do_file_open+0x16c/0x290 [ 224.520776][T12791] do_sys_openat2+0x94/0x130 [ 224.520804][T12791] __x64_sys_openat+0xf2/0x120 [ 224.520845][T12791] x64_sys_call+0x1e39/0x3020 [ 224.520880][T12791] do_syscall_64+0x12c/0x370 [ 224.520925][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.520981][T12791] RIP: 0033:0x7f9b99b6c629 [ 224.521001][T12791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.521024][T12791] RSP: 002b:00007f9b9859e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 224.521058][T12791] RAX: ffffffffffffffda RBX: 00007f9b99de6090 RCX: 00007f9b99b6c629 [ 224.521076][T12791] RDX: 0000000000002141 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 224.521093][T12791] RBP: 00007f9b9859e090 R08: 0000000000000000 R09: 0000000000000000 [ 224.521181][T12791] R10: 0000000000000059 R11: 0000000000000246 R12: 0000000000000002 [ 224.521193][T12791] R13: 00007f9b99de6128 R14: 00007f9b99de6090 R15: 00007ffd7cfe1618 [ 224.521213][T12791] [ 224.523811][T12793] __nla_validate_parse: 3 callbacks suppressed [ 224.523828][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2495'. [ 224.832095][T12798] futex_wake_op: syz.5.2497 tries to shift op by 36; fix this program [ 224.972248][T12808] set_capacity_and_notify: 2 callbacks suppressed [ 224.972266][T12808] loop5: detected capacity change from 0 to 512 [ 225.013800][T12808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.043187][T12808] EXT4-fs (loop5): 1 truncate cleaned up [ 225.049384][T12808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.113441][ T5553] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.123890][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2500'. [ 225.368210][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.452648][T12821] lo speed is unknown, defaulting to 1000 [ 225.458442][T12821] lo speed is unknown, defaulting to 1000 [ 225.514369][T12821] lo speed is unknown, defaulting to 1000 [ 225.536992][T12825] syzkaller0: entered promiscuous mode [ 225.542574][T12825] syzkaller0: entered allmulticast mode [ 225.592045][T12821] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 225.613990][T12827] loop1: detected capacity change from 0 to 8192 [ 225.630044][T12821] lo speed is unknown, defaulting to 1000 [ 225.673678][T12821] lo speed is unknown, defaulting to 1000 [ 225.685237][T12821] lo speed is unknown, defaulting to 1000 [ 225.703361][T12821] lo speed is unknown, defaulting to 1000 [ 225.709610][T12821] lo speed is unknown, defaulting to 1000 [ 225.798395][T12830] loop1: detected capacity change from 0 to 512 [ 225.827285][T12830] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.949937][T12823] lo speed is unknown, defaulting to 1000 [ 225.984869][T12848] netlink: 212 bytes leftover after parsing attributes in process `syz.8.2517'. [ 226.008067][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2517'. [ 226.013127][ T23] hid_parser_main: 218 callbacks suppressed [ 226.013234][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.023347][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2517'. [ 226.062600][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.079527][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.095882][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.111485][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.131333][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.147532][T12850] loop8: detected capacity change from 0 to 512 [ 226.164905][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.189712][T12850] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 226.194054][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.209868][T12850] EXT4-fs (loop8): 1 truncate cleaned up [ 226.217996][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.222364][T12850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.239017][T12850] EXT4-fs error (device loop8): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.8.2518: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 226.244864][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 226.271678][T12850] EXT4-fs error (device loop8) in ext4_delete_entry:2737: Corrupt filesystem [ 226.302511][ T23] hid-generic 0000:0000:0000.0003: item fetching failed at offset 36/43 [ 226.312606][ T23] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 226.329391][T12856] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2519'. [ 226.338715][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2519'. [ 226.410965][T12866] sctp: [Deprecated]: syz.1.2521 (pid 12866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.410965][T12866] Use struct sctp_sack_info instead [ 226.511605][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 226.511619][ T28] audit: type=1326 audit(1771700737.461:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.1.2521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x0 [ 226.542635][T12870] syzkaller0: entered promiscuous mode [ 226.548213][T12870] syzkaller0: entered allmulticast mode [ 226.564259][T12870] tipc: Enabled bearer , priority 10 [ 226.577149][T12869] tipc: Resetting bearer [ 226.601075][T12869] tipc: Disabling bearer [ 226.614438][ T5060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.667678][T12875] 9p: Bad value for 'rfdno' [ 226.690125][ T28] audit: type=1400 audit(1771700737.611:1471): avc: denied { mounton } for pid=12874 comm="syz.8.2524" path="/388/file0" dev="tmpfs" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 226.724224][T12881] netlink: 'syz.9.2526': attribute type 10 has an invalid length. [ 226.732263][T12881] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2526'. [ 226.748515][T12884] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2527'. [ 226.795458][T12879] loop5: detected capacity change from 0 to 512 [ 226.864933][T12879] EXT4-fs: Ignoring removed nobh option [ 226.897747][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 226.947582][T12879] EXT4-fs (loop5): orphan cleanup on readonly fs [ 226.984451][T12879] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.2525: EA inode hash validation failed [ 227.034210][ T28] audit: type=1400 audit(1771700737.929:1472): avc: denied { mounton } for pid=12889 comm="syz.8.2530" path="/390/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 227.071533][T12879] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2525: corrupted inode contents [ 227.138601][T12879] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.140356][T12879] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.2525: mark_inode_dirty error [ 227.149959][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 227.150157][ C0] EXT4-fs (loop5): initial error at time 1771700738: ext4_do_update_inode:5569: inode 15 [ 227.150422][ C0] EXT4-fs (loop5): last error at time 1771700738: ext4_do_update_inode:5569: inode 15 [ 227.205550][T12879] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.207424][T12879] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2525: corrupted inode contents [ 227.255314][T12879] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.256287][T12879] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.2525: mark_inode_dirty error [ 227.298807][T12879] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.300099][T12879] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.2525: mark inode dirty (error -117) [ 227.323545][T12879] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.329575][T12879] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 227.374246][T12879] EXT4-fs (loop5): 1 orphan inode deleted [ 227.437752][T12879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 227.605764][T12905] lo speed is unknown, defaulting to 1000 [ 227.679047][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.861210][T12911] syzkaller0: entered promiscuous mode [ 227.870087][T12911] syzkaller0: entered allmulticast mode [ 228.065313][ T28] audit: type=1326 audit(1771700738.893:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 228.131609][ T28] audit: type=1326 audit(1771700738.911:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 228.174275][ T28] audit: type=1326 audit(1771700738.911:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 228.259991][ T28] audit: type=1326 audit(1771700738.911:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 228.334076][ T28] audit: type=1326 audit(1771700738.911:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 228.398973][ T28] audit: type=1326 audit(1771700738.911:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 228.443119][ T28] audit: type=1326 audit(1771700738.911:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b99b6c629 code=0x7ffc0000 [ 228.542404][T12941] netlink: 'syz.3.2546': attribute type 39 has an invalid length. [ 228.553984][T12966] hub 9-0:1.0: USB hub found [ 228.559614][T12966] hub 9-0:1.0: 8 ports detected [ 228.633215][T12975] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 228.652421][T12975] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 228.813759][T12986] loop9: detected capacity change from 0 to 512 [ 228.853026][T12986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.891435][T12986] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.009092][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.049963][T12971] lo speed is unknown, defaulting to 1000 [ 229.299422][T13014] loop1: detected capacity change from 0 to 512 [ 229.307758][T13014] EXT4-fs: Ignoring removed bh option [ 229.330120][T13014] EXT4-fs: inline encryption not supported [ 229.349068][T13014] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.399345][T13014] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 229.440506][T13014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2571: bg 0: block 248: padding at end of block bitmap is not set [ 229.472259][T13014] loop1: lost filesystem error report for type 5 error -117 [ 229.478505][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 229.492321][ C0] EXT4-fs (loop1): last error at time 1771700740: ext4_validate_block_bitmap:441 [ 229.498357][T13014] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2571: Failed to acquire dquot type 1 [ 229.544783][T13014] loop1: lost filesystem error report for type 5 error -117 [ 229.586843][T13018] netlink: 'syz.5.2572': attribute type 10 has an invalid length. [ 229.603937][T13018] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 229.619759][T13014] EXT4-fs (loop1): 1 truncate cleaned up [ 229.625915][T13014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 229.758523][ T7895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 229.966486][T13034] loop5: detected capacity change from 0 to 4096 [ 229.990259][T13034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.037999][T13040] loop1: detected capacity change from 0 to 164 [ 230.058793][T13040] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 230.128530][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.220401][T13046] loop1: detected capacity change from 0 to 512 [ 230.248179][T13046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 230.280916][T13046] EXT4-fs (loop1): 1 truncate cleaned up [ 230.290965][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.345319][T13046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.390024][T13046] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.1.2584: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 230.443013][T13046] EXT4-fs error (device loop1) in ext4_delete_entry:2737: Corrupt filesystem [ 230.496771][T13035] lo speed is unknown, defaulting to 1000 [ 230.564466][T13060] loop5: detected capacity change from 0 to 2048 [ 230.709446][T13060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.748408][T13063] lo speed is unknown, defaulting to 1000 [ 230.756317][T13060] netlink: 'syz.5.2587': attribute type 2 has an invalid length. [ 230.782916][T13060] __nla_validate_parse: 4 callbacks suppressed [ 230.782936][T13060] netlink: 199792 bytes leftover after parsing attributes in process `syz.5.2587'. [ 230.852472][ T7895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.911553][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.005208][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 231.022243][T13073] netlink: 'syz.1.2589': attribute type 4 has an invalid length. [ 231.031755][T13073] netlink: 'syz.1.2589': attribute type 4 has an invalid length. [ 231.308085][T13089] netlink: 'syz.1.2596': attribute type 6 has an invalid length. [ 231.455798][T13096] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2596'. [ 232.021494][T13107] FAULT_INJECTION: forcing a failure. [ 232.021494][T13107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 232.066228][T13107] CPU: 0 UID: 0 PID: 13107 Comm: syz.3.2600 Tainted: G W syzkaller #0 PREEMPT(full) [ 232.066342][T13107] Tainted: [W]=WARN [ 232.066348][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.066360][T13107] Call Trace: [ 232.066374][T13107] [ 232.066382][T13107] __dump_stack+0x1d/0x30 [ 232.066417][T13107] dump_stack_lvl+0x95/0xd0 [ 232.066447][T13107] dump_stack+0x15/0x1b [ 232.066475][T13107] should_fail_ex+0x263/0x280 [ 232.066503][T13107] should_fail_alloc_page+0xf2/0x100 [ 232.066586][T13107] __alloc_frozen_pages_noprof+0x108/0x360 [ 232.066627][T13107] alloc_pages_mpol+0xb3/0x260 [ 232.066663][T13107] ? css_rstat_updated+0xbb/0x280 [ 232.066745][T13107] vma_alloc_folio_noprof+0x1a9/0x300 [ 232.066805][T13107] handle_mm_fault+0x111f/0x3020 [ 232.066849][T13107] ? vma_start_read+0x1c7/0x2c0 [ 232.066881][T13107] do_user_addr_fault+0x62f/0x1050 [ 232.066978][T13107] ? ksys_mmap_pgoff+0xc1/0x310 [ 232.067004][T13107] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 232.067079][T13107] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 232.067191][T13107] ? trace_page_fault_user+0x1f/0xe0 [ 232.067309][T13107] exc_page_fault+0x62/0xa0 [ 232.067347][T13107] asm_exc_page_fault+0x26/0x30 [ 232.067367][T13107] RIP: 0033:0x7fe8279f3b18 [ 232.067383][T13107] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 232.067487][T13107] RSP: 002b:00007fe82658e470 EFLAGS: 00010202 [ 232.067510][T13107] RAX: 0000000000014000 RBX: 00007fe82658e530 RCX: 0000000000000011 [ 232.067527][T13107] RDX: 00000000000007ae RSI: 00000000000037af RDI: 00007fe82658e5d0 [ 232.067541][T13107] RBP: 0000000000000012 R08: 00007fe81e16f000 R09: 0000000000000073 [ 232.067553][T13107] R10: 0000200000000d42 R11: 00000000000007a9 R12: 0000000000003001 [ 232.067566][T13107] R13: 00007fe827bf2200 R14: 000000000000001b R15: 00007fe82658e5d0 [ 232.067586][T13107] [ 232.071192][T13107] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 232.316703][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 232.316720][ T28] audit: type=1326 audit(1771700742.887:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.316931][ T28] audit: type=1326 audit(1771700742.887:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.317228][ T28] audit: type=1326 audit(1771700742.887:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.317401][ T28] audit: type=1326 audit(1771700742.887:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.320343][ T28] audit: type=1326 audit(1771700742.887:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.320626][ T28] audit: type=1326 audit(1771700742.887:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.320822][ T28] audit: type=1326 audit(1771700742.887:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.320977][ T28] audit: type=1326 audit(1771700742.887:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.321159][ T28] audit: type=1326 audit(1771700742.887:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.321251][ T28] audit: type=1326 audit(1771700742.887:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13114 comm="syz.5.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742a76c629 code=0x7ffc0000 [ 232.463272][T13119] loop1: detected capacity change from 0 to 1024 [ 232.660855][T13119] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.685370][T13119] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 232.708188][T13119] EXT4-fs error (device loop1): __ext4_fill_super:5565: inode #2: comm syz.1.2605: iget: special inode unallocated [ 232.786759][T13119] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 232.786906][T13119] EXT4-fs (loop1): get root inode failed [ 232.796023][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 232.796038][ C0] EXT4-fs (loop1): initial error at time 1771700743: __ext4_fill_super:5565: inode 2 [ 232.796061][ C0] EXT4-fs (loop1): last error at time 1771700743: __ext4_fill_super:5565: inode 2 [ 232.907896][T13119] EXT4-fs (loop1): mount failed [ 232.933828][T13137] loop9: detected capacity change from 0 to 128 [ 232.994032][T13140] loop1: detected capacity change from 0 to 128 [ 233.024612][T13140] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.144314][T13140] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.416392][T13146] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2612'. [ 233.792059][T13151] netlink: 192 bytes leftover after parsing attributes in process `syz.9.2614'. [ 233.835048][T13153] loop5: detected capacity change from 0 to 512 [ 233.874193][T13153] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 233.946913][T13154] netlink: 'syz.3.2606': attribute type 16 has an invalid length. [ 234.041767][T13154] netlink: 58126 bytes leftover after parsing attributes in process `syz.3.2606'. [ 234.115412][T11931] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.217274][T13167] loop1: detected capacity change from 0 to 2048 [ 234.247650][T13167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.833053][T13165] lo speed is unknown, defaulting to 1000 [ 235.885286][T13175] netlink: 'syz.9.2619': attribute type 2 has an invalid length. [ 235.913939][T13175] netlink: 'syz.9.2619': attribute type 4 has an invalid length. [ 235.929794][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2619'. [ 236.012090][T13180] loop5: detected capacity change from 0 to 512 [ 236.018674][T13180] SELinux: security_context_str_to_sid () failed with errno=-22 [ 236.140123][T13187] loop9: detected capacity change from 0 to 512 [ 236.154694][T13187] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 236.175053][T13187] EXT4-fs (loop9): 1 truncate cleaned up [ 236.210906][T13187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.265735][T13187] EXT4-fs error (device loop9): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.9.2623: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 236.293462][T13187] EXT4-fs error (device loop9) in ext4_delete_entry:2737: Corrupt filesystem [ 236.333512][ T7895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.413745][T13201] loop1: detected capacity change from 0 to 512 [ 236.591592][T13201] FAT-fs (loop1): error, invalid access to FAT (entry 0x000000c8) [ 236.799714][ T5553] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.435712][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.445454][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.854690][T13240] netlink: 'syz.5.2637': attribute type 10 has an invalid length. [ 237.925959][T13240] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2637'. [ 237.970632][T13240] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 238.061233][T13245] loop5: detected capacity change from 0 to 512 [ 238.092688][T13243] loop1: detected capacity change from 0 to 1024 [ 238.100391][T13245] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.131422][T13245] EXT4-fs (loop5): 1 truncate cleaned up [ 238.137925][T13245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.182164][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 238.182181][ T28] audit: type=1400 audit(1771700748.379:1570): avc: denied { mounton } for pid=13244 comm="syz.5.2639" path="/503/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.223328][T13243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 238.232276][T13243] System zones: 0-1, 3-8 [ 238.295395][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2639'. [ 238.307810][T13243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.330739][T13243] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.483995][T13243] EXT4-fs (loop1): shut down requested (0) [ 238.514624][ T7895] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.515426][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.592583][T13259] loop1: detected capacity change from 0 to 512 [ 238.601486][T13259] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 238.612251][T13261] loop5: detected capacity change from 0 to 764 [ 238.624379][ T28] audit: type=1404 audit(1771700748.791:1571): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 238.653421][T13259] EXT4-fs (loop1): 1 truncate cleaned up [ 238.661613][T13259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.674089][ T28] audit: type=1400 audit(1771700748.791:1572): avc: denied { open } for pid=13256 comm="syz.9.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 238.693854][ T28] audit: type=1326 audit(1771700748.800:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.9.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c5bbc629 code=0x7ffc0000 [ 238.703977][T13259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.718137][ T28] audit: type=1326 audit(1771700748.800:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.9.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c5bbc629 code=0x7ffc0000 [ 238.750077][ T28] audit: type=1326 audit(1771700748.800:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.9.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c5bbc629 code=0x7ffc0000 [ 238.773796][ T28] audit: type=1326 audit(1771700748.800:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.9.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c5bbc629 code=0x7ffc0000 [ 238.797384][ T28] audit: type=1326 audit(1771700748.800:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.9.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c5bbc629 code=0x7ffc0000 [ 238.836599][ T28] audit: type=1326 audit(1771700748.800:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.9.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77c5bbc629 code=0x7ffc0000 [ 238.871237][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2642'. [ 238.890933][T13258] Process accounting resumed [ 238.933129][ T28] audit: type=1326 audit(1771700748.800:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.9.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c5bbc629 code=0x7ffc0000 [ 238.998400][T13275] netlink: 'syz.9.2649': attribute type 10 has an invalid length. [ 239.009057][T13275] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2649'. [ 239.070763][T13284] dummy0: left promiscuous mode [ 239.114764][T13284] hsr1: left promiscuous mode [ 239.292342][T13303] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 239.407800][T13310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2665'. [ 239.427958][T13310] bridge0: entered promiscuous mode [ 239.433751][T13310] bridge0: entered allmulticast mode [ 239.497497][T13278] lo speed is unknown, defaulting to 1000 [ 239.850798][T13328] netlink: 'syz.1.2671': attribute type 10 has an invalid length. [ 239.973024][T13333] sctp: [Deprecated]: syz.1.2673 (pid 13333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.973024][T13333] Use struct sctp_sack_info instead [ 240.759378][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2686'. [ 240.890756][T13373] netlink: 'syz.9.2688': attribute type 39 has an invalid length. [ 241.185850][T13402] netlink: 'syz.9.2698': attribute type 10 has an invalid length. [ 241.516207][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2702'. [ 241.861075][T13427] lo speed is unknown, defaulting to 1000 [ 242.383367][T13458] 8021q: VLANs not supported on gre0 [ 242.692479][T13472] lo speed is unknown, defaulting to 1000 [ 242.917212][T13476] sctp: [Deprecated]: syz.9.2730 (pid 13476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.917212][T13476] Use struct sctp_sack_info instead [ 243.237260][T13470] syz.5.2728 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 243.257983][T13470] CPU: 0 UID: 0 PID: 13470 Comm: syz.5.2728 Tainted: G W syzkaller #0 PREEMPT(full) [ 243.258019][T13470] Tainted: [W]=WARN [ 243.258026][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.258041][T13470] Call Trace: [ 243.258060][T13470] [ 243.258069][T13470] __dump_stack+0x1d/0x30 [ 243.258101][T13470] dump_stack_lvl+0x95/0xd0 [ 243.258131][T13470] dump_stack+0x15/0x1b [ 243.258153][T13470] dump_header+0x80/0x240 [ 243.258212][T13470] oom_kill_process+0x295/0x350 [ 243.258251][T13470] out_of_memory+0x97d/0xb80 [ 243.258279][T13470] try_charge_memcg+0x62e/0xa10 [ 243.258331][T13470] obj_cgroup_charge_pages+0x23/0xc0 [ 243.258385][T13470] __memcg_kmem_charge_page+0x9e/0x170 [ 243.258412][T13470] __alloc_frozen_pages_noprof+0x18a/0x360 [ 243.258449][T13470] alloc_pages_mpol+0xb3/0x260 [ 243.258587][T13470] alloc_pages_noprof+0x8f/0x130 [ 243.258614][T13470] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 243.258669][T13470] __kvmalloc_node_noprof+0x3d4/0x650 [ 243.258724][T13470] ? futex_hash_allocate+0x190/0x9d0 [ 243.258752][T13470] ? futex_hash_allocate+0x190/0x9d0 [ 243.258862][T13470] futex_hash_allocate+0x190/0x9d0 [ 243.258894][T13470] ? cap_task_prctl+0x13f/0x6e0 [ 243.258924][T13470] futex_hash_prctl+0xd8/0xf0 [ 243.258952][T13470] __se_sys_prctl+0xa3d/0x13f0 [ 243.258982][T13470] __x64_sys_prctl+0x67/0x80 [ 243.259092][T13470] x64_sys_call+0x2533/0x3020 [ 243.259190][T13470] do_syscall_64+0x12c/0x370 [ 243.259224][T13470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.259245][T13470] RIP: 0033:0x7f742a76c629 [ 243.259272][T13470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.259294][T13470] RSP: 002b:00007f74291c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 243.259393][T13470] RAX: ffffffffffffffda RBX: 00007f742a9e5fa0 RCX: 00007f742a76c629 [ 243.259411][T13470] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 243.259426][T13470] RBP: 00007f742a802b39 R08: 0000000000000000 R09: 0000000000000000 [ 243.259506][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.259522][T13470] R13: 00007f742a9e6038 R14: 00007f742a9e5fa0 R15: 00007ffd7d294348 [ 243.259622][T13470] [ 243.259842][T13470] memory: usage 307200kB, limit 307200kB, failcnt 216 [ 243.432354][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2732'. [ 243.509108][T13470] memory+swap: usage 310596kB, limit 9007199254740988kB, failcnt 0 [ 243.521207][T13470] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 243.528881][T13470] Memory cgroup stats for /syz5: [ 243.529194][T13470] cache 0 [ 243.538813][T13470] rss 20480 [ 243.542040][T13470] shmem 0 [ 243.545017][T13470] mapped_file 0 [ 243.563004][T13470] dirty 0 [ 243.569456][T13470] writeback 0 [ 243.576316][T13470] workingset_refault_anon 25 [ 243.581587][T13470] workingset_refault_file 0 [ 243.586441][T13470] swap 3477504 [ 243.590320][T13470] swapcached 3510272 [ 243.594547][T13470] pgpgin 324229 [ 243.603787][T13470] pgpgout 324217 [ 243.607442][T13470] pgfault 211143 [ 243.611419][T13470] pgmajfault 17 [ 243.614987][T13470] inactive_anon 16384 [ 243.619181][T13470] active_anon 8192 [ 243.636675][ T28] kauditd_printk_skb: 541 callbacks suppressed [ 243.636689][ T28] audit: type=1400 audit(1771700753.478:2121): avc: denied { read write } for pid=7895 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.666105][T13470] inactive_file 24576 [ 243.671877][T13470] active_file 0 [ 243.675887][T13470] unevictable 0 [ 243.692843][ T28] audit: type=1400 audit(1771700753.515:2122): avc: denied { read write } for pid=7974 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.718072][ T28] audit: type=1400 audit(1771700753.524:2123): avc: denied { open } for pid=13482 comm="syz.1.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 243.733763][T13470] hierarchical_memory_limit 314572800 [ 243.745841][ T28] audit: type=1400 audit(1771700753.524:2124): avc: denied { create } for pid=13482 comm="syz.1.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 243.772668][T13470] hierarchical_memsw_limit 9223372036854771712 [ 243.782086][T13470] total_cache 0 [ 243.785573][T13470] total_rss 20480 [ 243.789218][T13470] total_shmem 0 [ 243.793181][ T28] audit: type=1400 audit(1771700753.562:2125): avc: denied { write } for pid=13482 comm="syz.1.2733" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 243.812924][T13470] total_mapped_file 0 [ 243.820547][T13470] total_dirty 0 [ 243.834304][T13470] total_writeback 0 [ 243.838197][T13470] total_workingset_refault_anon 25 [ 243.843340][T13470] total_workingset_refault_file 0 [ 243.854307][ T28] audit: type=1400 audit(1771700753.562:2126): avc: denied { read write } for pid=13483 comm="syz.3.2734" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 243.866230][T13470] total_swap 3477504 [ 243.892119][T13470] total_swapcached 3510272 [ 243.900664][T13470] total_pgpgin 324229 [ 243.904679][T13470] total_pgpgout 324217 [ 243.908780][T13470] total_pgfault 211143 [ 243.928598][ T28] audit: type=1400 audit(1771700753.580:2127): avc: denied { allowed } for pid=13483 comm="syz.3.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 243.930386][T13470] total_pgmajfault 17 [ 243.974196][ T28] audit: type=1400 audit(1771700753.655:2128): avc: denied { prog_load } for pid=13483 comm="syz.3.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 243.979736][T13470] total_inactive_anon 16384 [ 244.015847][T13470] total_active_anon 8192 [ 244.020600][ T28] audit: type=1400 audit(1771700753.786:2129): avc: denied { read write } for pid=13482 comm="syz.1.2733" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.027189][T13470] total_inactive_file 24576 [ 244.078020][ T28] audit: type=1400 audit(1771700753.870:2130): avc: denied { read write } for pid=7974 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 244.101423][T13470] total_active_file 0 [ 244.107248][T13470] total_unevictable 0 [ 244.111260][T13470] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2728,pid=13469,uid=0 [ 244.128212][T13494] FAULT_INJECTION: forcing a failure. [ 244.128212][T13494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.141589][T13470] Memory cgroup out of memory: Killed process 13469 (syz.5.2728) total-vm:96076kB, anon-rss:1240kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 244.159208][T13494] CPU: 1 UID: 0 PID: 13494 Comm: syz.3.2737 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.159240][T13494] Tainted: [W]=WARN [ 244.159248][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.159326][T13494] Call Trace: [ 244.159376][T13494] [ 244.159387][T13494] __dump_stack+0x1d/0x30 [ 244.159414][T13494] dump_stack_lvl+0x95/0xd0 [ 244.159437][T13494] dump_stack+0x15/0x1b [ 244.159542][T13494] should_fail_ex+0x263/0x280 [ 244.159657][T13494] should_fail_alloc_page+0xf2/0x100 [ 244.159686][T13494] __alloc_frozen_pages_noprof+0x108/0x360 [ 244.159725][T13494] alloc_pages_mpol+0xb3/0x260 [ 244.159787][T13494] folio_alloc_mpol_noprof+0x39/0x80 [ 244.159827][T13494] shmem_get_folio_gfp+0x3da/0xd60 [ 244.159896][T13494] ? simple_xattr_get+0xb5/0x150 [ 244.159997][T13494] shmem_write_begin+0xfc/0x1f0 [ 244.160050][T13494] generic_perform_write+0x183/0x490 [ 244.160105][T13494] ? current_time+0x188/0x240 [ 244.160144][T13494] shmem_file_write_iter+0xc5/0xf0 [ 244.160209][T13494] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 244.160248][T13494] vfs_write+0x5a6/0x9f0 [ 244.160292][T13494] ksys_write+0xdc/0x1a0 [ 244.160324][T13494] __x64_sys_write+0x40/0x50 [ 244.160408][T13494] x64_sys_call+0x27e1/0x3020 [ 244.160459][T13494] do_syscall_64+0x12c/0x370 [ 244.160534][T13494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.160561][T13494] RIP: 0033:0x7fe827afcece [ 244.160581][T13494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.160605][T13494] RSP: 002b:00007fe82658eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.160690][T13494] RAX: ffffffffffffffda RBX: 00007fe82658f6c0 RCX: 00007fe827afcece [ 244.160706][T13494] RDX: 000000000005f800 RSI: 00007fe81e16f000 RDI: 0000000000000004 [ 244.160719][T13494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.160778][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 244.160790][T13494] R13: 00007fe82658eee0 R14: 00007fe82658eea0 R15: 00007fe81e16f000 [ 244.160878][T13494] [ 244.398294][T13497] lo speed is unknown, defaulting to 1000 [ 244.494505][T13497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13497 comm=syz.3.2738 [ 244.711611][T13519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13519 comm=syz.5.2746 [ 244.923634][T13514] lo speed is unknown, defaulting to 1000 [ 244.983099][T11352] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.087749][T11352] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.131466][T11352] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.183937][T11352] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.229357][T13534] lo speed is unknown, defaulting to 1000 [ 245.264121][T13534] netlink: 'syz.9.2750': attribute type 4 has an invalid length. [ 245.272694][T13534] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2750'. [ 245.312589][T11352] bridge0: port 1(dummy0) entered disabled state [ 245.384163][T11352] gretap0 (unregistering): left promiscuous mode [ 245.548456][T11352] bond0 (unregistering): left promiscuous mode [ 245.555042][T11352] bond_slave_0: left promiscuous mode [ 245.560751][T11352] bond_slave_1: left promiscuous mode [ 245.566285][T11352] bridge_slave_1: left promiscuous mode [ 245.574839][T11352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.590073][T11352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.601056][T11352] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 245.610833][T11352] bond0 (unregistering): Released all slaves [ 245.619141][T11352] bond1 (unregistering): Released all slaves [ 245.654535][T11352] tipc: Disabling bearer [ 245.659889][T11352] tipc: Disabling bearer [ 245.665301][T11352] tipc: Disabling bearer [ 245.670830][T11352] tipc: Left network mode [ 245.679252][T11352] hsr_slave_0: left promiscuous mode [ 245.685047][T11352] hsr_slave_1: left promiscuous mode [ 245.690763][T11352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.700444][T11352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.722628][T11352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.743735][T11352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.774821][T11352] veth1_macvtap: left allmulticast mode [ 245.791085][T11352] veth1_macvtap: left promiscuous mode [ 245.796695][T11352] veth0_macvtap: left promiscuous mode [ 245.817489][T11352] veth1_vlan: left promiscuous mode [ 245.828258][T11352] veth0_vlan: left promiscuous mode [ 246.179848][T11352] IPVS: stop unused estimator thread 0... [ 247.265003][T13564] macvlan1: left allmulticast mode [ 247.271999][T13564] veth1_vlan: left allmulticast mode [ 248.112696][T11361] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.986352][ T28] kauditd_printk_skb: 30956 callbacks suppressed [ 248.986369][ T28] audit: type=1400 audit(1771700758.473:32661): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.012542][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.014337][ T28] audit: type=1400 audit(1771700758.483:32662): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.020480][ T3040] audit: audit_lost=143 audit_rate_limit=0 audit_backlog_limit=64 [ 249.045098][ T28] audit: type=1400 audit(1771700758.483:32663): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.050159][ T3040] audit: backlog limit exceeded [ 249.071302][ T28] audit: type=1400 audit(1771700758.483:32664): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.078600][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 249.098545][ T28] audit: type=1400 audit(1771700758.483:32665): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 249.107760][ T3040] audit: audit_lost=144 audit_rate_limit=0 audit_backlog_limit=64 [ 249.153431][T13580] netlink: 'syz.3.2768': attribute type 17 has an invalid length. [ 249.181787][T13580] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2768'. [ 250.290480][T13574] Bluetooth: hci0: command 0x1003 tx timeout [ 250.296574][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.771025][T13616] syzkaller0: entered promiscuous mode [ 252.788864][T13616] syzkaller0: entered allmulticast mode [ 254.342317][ T28] kauditd_printk_skb: 44113 callbacks suppressed [ 254.342337][ T28] audit: type=1400 audit(1771700763.497:76649): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.358359][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.370298][ T28] audit: type=1400 audit(1771700763.497:76650): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.378220][ T3040] audit: audit_lost=188 audit_rate_limit=0 audit_backlog_limit=64 [ 254.398105][ T28] audit: type=1400 audit(1771700763.497:76651): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.407383][ T3040] audit: backlog limit exceeded [ 254.427733][ T28] audit: type=1400 audit(1771700763.497:76652): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.432492][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.455770][ T28] audit: type=1400 audit(1771700763.497:76653): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 254.460318][ T3040] audit: audit_lost=189 audit_rate_limit=0 audit_backlog_limit=64 [ 255.750685][T13634] lo speed is unknown, defaulting to 1000 [ 258.329566][ T3152] ================================================================== [ 258.337700][ T3152] BUG: KCSAN: data-race in blk_mq_start_request / bt_for_each [ 258.345210][ T3152] [ 258.347555][ T3152] write to 0xffff888102b82480 of 8 bytes by task 2962 on cpu 1: [ 258.355209][ T3152] blk_mq_start_request+0x23c/0x3d0 [ 258.360452][ T3152] scsi_queue_rq+0xe08/0x1aa0 [ 258.365169][ T3152] blk_mq_dispatch_rq_list+0x2bc/0xf90 [ 258.370660][ T3152] __blk_mq_sched_dispatch_requests+0x7f0/0xc70 [ 258.376944][ T3152] blk_mq_sched_dispatch_requests+0x86/0x120 [ 258.382961][ T3152] blk_mq_run_hw_queue+0x17e/0x220 [ 258.388121][ T3152] blk_mq_dispatch_list+0x85e/0xa40 [ 258.393366][ T3152] blk_mq_flush_plug_list+0x2ca/0x320 [ 258.398786][ T3152] __blk_flush_plug+0x22c/0x2b0 [ 258.403682][ T3152] blk_finish_plug+0x47/0x70 [ 258.408302][ T3152] jbd2_journal_commit_transaction+0x1b84/0x3420 [ 258.414691][ T3152] kjournald2+0x22e/0x3e0 [ 258.419043][ T3152] kthread+0x22a/0x280 [ 258.423135][ T3152] ret_from_fork+0x150/0x360 [ 258.427774][ T3152] ret_from_fork_asm+0x1a/0x30 [ 258.432578][ T3152] [ 258.434918][ T3152] read to 0xffff888102b82480 of 8 bytes by task 3152 on cpu 0: [ 258.442493][ T3152] bt_for_each+0x25c/0x470 [ 258.446941][ T3152] blk_mq_queue_tag_busy_iter+0x1ef/0x3b0 [ 258.452699][ T3152] blk_mq_timeout_work+0xc4/0x370 [ 258.457762][ T3152] process_scheduled_works+0x4de/0x9e0 [ 258.463261][ T3152] worker_thread+0x581/0x770 [ 258.467901][ T3152] kthread+0x22a/0x280 [ 258.471998][ T3152] ret_from_fork+0x150/0x360 [ 258.476620][ T3152] ret_from_fork_asm+0x1a/0x30 [ 258.481419][ T3152] [ 258.483766][ T3152] value changed: 0xffff88810365b600 -> 0xffff888103661d40 [ 258.490890][ T3152] [ 258.493243][ T3152] Reported by Kernel Concurrency Sanitizer on: [ 258.499430][ T3152] CPU: 0 UID: 0 PID: 3152 Comm: kworker/0:1H Tainted: G W syzkaller #0 PREEMPT(full) [ 258.510491][ T3152] Tainted: [W]=WARN [ 258.514302][ T3152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.524390][ T3152] Workqueue: kblockd blk_mq_timeout_work [ 258.530054][ T3152] ================================================================== [ 259.445815][T11374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.517994][T11374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.583215][T11374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.679514][T11374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.697012][ T28] kauditd_printk_skb: 47904 callbacks suppressed [ 259.697027][ T28] audit: type=1400 audit(1771700768.493:119661): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.725890][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.732473][ T3040] audit: audit_lost=1822 audit_rate_limit=0 audit_backlog_limit=64 [ 259.740508][ T3040] audit: backlog limit exceeded [ 259.745503][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.752772][ T28] audit: type=1400 audit(1771700768.493:119662): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.774030][ T3040] audit: audit_lost=1823 audit_rate_limit=0 audit_backlog_limit=64 [ 259.781995][ T3040] audit: backlog limit exceeded [ 259.787842][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.794827][ T28] audit: type=1400 audit(1771700768.493:119663): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 259.862361][T11374] gretap0 (unregistering): left promiscuous mode [ 259.879495][T11374] bond0 (unregistering): left promiscuous mode [ 259.885705][T11374] bond_slave_0: left promiscuous mode [ 259.891227][T11374] bond_slave_1: left promiscuous mode [ 259.898927][T11374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.908469][T11374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.919410][T11374] bond0 (unregistering): Released all slaves [ 259.977293][T11374] tipc: Disabling bearer [ 259.982863][T11374] tipc: Left network mode [ 260.001636][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.009149][T11374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.016709][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.024346][T11374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.035317][T11374] vlan1: left allmulticast mode [ 260.040325][T11374] veth0_vlan: left allmulticast mode [ 260.045701][T11374] veth0_virt_wifi: left promiscuous mode [ 260.051693][T11374] veth1_macvtap: left promiscuous mode [ 260.057321][T11374] veth0_macvtap: left promiscuous mode [ 260.062966][T11374] veth1_vlan: left promiscuous mode [ 260.068417][T11374] veth0_vlan: left promiscuous mode [ 260.117505][T11374] pim6reg (unregistering): left allmulticast mode [ 260.157308][T11374] team0 (unregistering): Port device team_slave_1 removed [ 260.167696][T11374] team0 (unregistering): Port device team_slave_0 removed [ 260.470686][T11374] IPVS: stop unused estimator thread 0... [ 265.052249][ T28] kauditd_printk_skb: 49830 callbacks suppressed [ 265.052267][ T28] audit: type=1400 audit(1771700773.507:168865): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.075861][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.080269][ T28] audit: type=1400 audit(1771700773.516:168866): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.086399][ T3040] audit: audit_lost=2034 audit_rate_limit=0 audit_backlog_limit=64 [ 265.107608][ T28] audit: type=1400 audit(1771700773.516:168867): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.118772][ T3040] audit: backlog limit exceeded [ 265.137713][ T28] audit: type=1400 audit(1771700773.516:168868): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.142879][ T3040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.162957][ T28] audit: type=1400 audit(1771700773.516:168869): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 265.170006][ T3040] audit: audit_lost=2035 audit_rate_limit=0 audit_backlog_limit=64