last executing test programs: 6m33.568222596s ago: executing program 32 (id=148): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'decodes', ' ', 'none'}, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006310180000000000dc056400e8e06bf563d37c7c16fcbc7b"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000001080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3250}, 0x0, 0x0, 0x4, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0xb) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000f9ff00070000080900010073797a300000000050000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c0001800800014000000002140000001000010000000000000000770084000a"], 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 5m6.781982545s ago: executing program 33 (id=828): setreuid(0xee01, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0xfcb, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x30, 0x2, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) setns(r1, 0x8020000) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000004000000000000000000000000ee00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setns(r10, 0x24020000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc040000000501020000000000000000020000025402010001000000070000000002ada95a4e030073797a3100000000000000000000000000000000000000000000000000000000e4efcd91d4778863dacc9086edd95bb20a5bcc97f11d3bd7121a3ebb559fed8e179ac0ad5866ee8e47827af85418d1373e6630f410832ab0228a87e232dde5560500070002000000780000000f000f000100000006000000fbff0200000000007f000000060006000200000004000000ff030800020000000500000005007c7601000000030000000700858801000000ff07000001010004000000008100000000108100030000000200000010000038030000000100010002000100020000000c000000010100080100000005000000ff0f7f000000000040000000040003000100000002000000ff00fb0f00000000070000000030002000000000020000000f0002000100000000800000ff0000800300000000000000010000000000000001000100040004000300000002000000d80004000100000007000000020000100200000003000000ff03050003000000e3000000000804000100000004000000050001000000000008000000010400000000000003000000ff01010001000000010000000500b1000200000063f800000f00960002000000100000000004010001000000040000000800fceb0300000000000000ff0f24ea00000000050000000300050000000000090000000400000802000000060000008000000000000000450b00000100188d0200000002000000040002000300000000000000050039ab01000000fde8000008000900030000000000000000000700030000000900000054020100030000000300000006dd020002001a0073797a310000000000000000000000000000000000000000000000000000000043ce3f24e781b30f111b8f3949a923e396b2efcc6c523fa228f749c6f34608d03dd6a2b378ac1f45c2839562f3da05e55dfe0740d96b5c57a4a8d70113182ea69099060003000000040000000a000080020000000500000004000100010000000600000000007f0002000000deae000005000100010000006d26ffff080007000100000001000000b400030003000000dc0000000300090000000000ef00000009000400030000002304000005000300000000000100000056980400020000000000000004000000010000000a0000000a000600030000004002000006000000010000000600000000020600030000000000000007000500030000000300000003000000010000000e00000003000700010000000200000006000001030000000600000001800100000000000c00000001000300020000004a0700000300070000000000001000008002060001000000010100000080100002000000080000000100010000000000000001000100f30a03000000c82300008100010000000000050000000151619ae79b00ff0302000000c70900000300ad5e0200000000020000070007000100000003000000000002000000000004000000bb00050002000000280000000600060000000000fcffffff0080fc000100000006000000ff0faa0a01000000800000000900e10000000000090000000f0000040300000004000000037a08000000000002000000060001000000000001000000060002000200000007000000ce250ac19d02b68e660ec25777fddda3ccd7a54f4f5196f71efc2cadaea1d11dc6c9a3e221f589726b992146bdf71d055d91b469ba7143b7a1ef8d81270e4e77ede7dc9e1f5f82e3f130e4ddbef81dd2243083b913847058a0022c80a0ed356179aa72ba9d03e556a25900fb450e327f7ae460e321e84d016e22c82593121f74352d7024e0fdbb43010779716a7889e774b69fd4be638e1109814893aa8545737969bf6e7abb2bb31015a4589fe59bf23e10668ef298cb8e2651d326a4de6494eabea90546b9"], 0x4bc}, 0x1, 0x0, 0x0, 0x5}, 0x20040811) socket$kcm(0x10, 0x3, 0x10) 4m43.123057891s ago: executing program 34 (id=904): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) r2 = getpid() tkill(r2, 0x4012) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x8045) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={0x0}) sendmmsg(r1, &(0x7f0000000800)=[{{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @remote, 0x400}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="68af948d03ee2e3a43be599f4ea8df0c0796e1b6a998ab6a927f07727c", 0x1d}], 0x1, &(0x7f0000000200)=[{0x28, 0x112, 0x8, "f12eecdcf70596fad7d7c9074e12b4bf99fe48"}, {0xf0, 0x84, 0x0, "6de81dbfa3434c72b7bc43ca9860dfebfd834a956a8f19683111a1a1cde814984a0f8ec8b904a4598c9a3bc44dd207fa4c3a87d2a2775867eac0a97bffcaa75c82087916492d8f1192b14aa319d32e2c1cc80fb2cc2c45d5638fd1927b4629d63a71107266735eca7a8d9a8b7eaf3fc8df857374dcfeebc5a60301baa936e5bf0cd32cc883faa29067ec38ebf7ceba2138ba4f8f03052d46bcc9b58e605b6c8a3cf2636e839002bfbc3884eb1985197a04bf940b67fda81c8f18df79464493a2b04329e2e031575ec9aa924900cac8d5b6c63b430920257c14c1d88190ec25"}, {0x30, 0xff, 0x6, "20264cce2ab551a6316c93749974600cda48ad40d3551a7289a1651792a5"}, {0x80, 0x8bf1f5b2fbef79bc, 0x5, "2ee1d53040c5f61ccf0a94c141e7c35a7d6f77ce1c7e27d68d32bc19b910cc2f6217a77ea6a45cc593383bcde9d02994bf444c61b7cb1d11e3214361354398c168e5141bbb9c41694b7f2730cb8a3f7a60a3f96cf53a2ad4558516f51df8f1dce5ad1ea38ddb5ebe238d564d08982008"}, {0xa8, 0x386, 0x8001, "d3a11c44003dd8ec70c41413f870c3a6e58e17ce723bf3407961a62835ea33ceec0bd7331abc52b0951a85539c6404e7db791cb5fffa20d994360e1f6132d9e1379c3cd8b48631e0aad13920b0a848133d165185b70658e294b8a3062270b38ac5416ca02fb791e750e015b7538103a27977701e0c4308dd7722cd0f4b2b6435fb549840d8dd87dc6d04c9ce307e0f4dcd8c"}], 0x270}}, {{&(0x7f0000000480)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(des)\x00'}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)="5d692c63df932178e39a7edf2090038475ac3a579c6a02431cfc85e82dbe8c488ba45ed64f52d038268b2306aa86a4b75f080ff8268f49c090aa753cfdab3963fc0fa25ce5f627e4dd32903ceb7475d8a73135eb585e51a32010936c43551819e4b2b85c8d23b7e99f3cdba7c74ee78db5aaa3655266e71a1107188c8d23c5c59c097c481ee861ed811d17b4d3b79b9b5e9198679872be996b927875a0f8c87962f0ad817d1d6fa9", 0xa8}, {&(0x7f00000005c0)="a10a3ae8e42c7b729f8875c4ab55eb01e28b89afb4ad7659f9e006141862c56cd1aa0675a600b5498279f08b493caa6254a0aac3bb7fabbf09904f9853889b802865f7f12b5cbc94c4fe2b8ad9a850b124cb0511399f34c9e14ed608441a92d63f9b925c79ebfeda4b8305e0f0a299ec25118d23781eea0d4631e51742167116f772cf23a4db31a911ab3eab72626dfb51e77fb6e57d5525df", 0x99}], 0x2, &(0x7f00000006c0)=[{0xc0, 0x1f8, 0x5, "62f25393f21c7c04f7c823942c3b7349a452b08fb7cfe401c39c7ed085ec2c37fe448cdc6aa32af714efe57a97b2a4508179308790bbffc6ded2ce35dd7ee672f9fd62f15a2876bc4fbbf4eebfc7318c9b47bb176522cbd4bc27bd67f1052855c46e724ec20477001c8ee389b39d97c5b015f683f9735a930470c853410858dc2613f9dff0a874ecc120b594acdef9d2c5e7a83d0ec8a25a25dbbe9049b92c1dd28e48c729ca0c9458"}, {0x70, 0x108, 0xffff7fff, "4cdc4a1a6706dc6026ae4a7945bd020f04b13f47ebb2bd71d7f27902dd650e261a98627d653e291f208e93e407bdfa88d9d7854252831c334ed071c51f17fec6324ae12366b7e9bd38219867e3981dd6c00e87c5c4af1af37b73"}], 0x130}}], 0x2, 0x10) 4m8.277790718s ago: executing program 35 (id=1301): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200080}}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01260000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100fffd0900010073797a300000000008000b40000000003800048034000180090001007866726d0000000024000280050003000100000008000440000000060800014000000015080002"], 0xd4}}, 0x4000040) r8 = syz_open_pts(r6, 0x0) r9 = dup3(r8, r6, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r11 = syz_open_pts(r9, 0x42c0) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000000080)={0x7fff, 0xff, 0xd, 0x3, 0x8, "5dcecd1a7e2f9ea68f15c55f9db481c538e6f2", 0xfff, 0x16}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) dup2(r8, r6) syz_open_dev$sg(&(0x7f00000000c0), 0xf7, 0x40) 3m20.447453536s ago: executing program 36 (id=1774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4e3, &(0x7f0000001200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x110) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101642, 0x33) pwritev2(r2, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0x1}], 0x1, 0x9, 0xc, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) fadvise64(r4, 0x2, 0x0, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 2m41.242039631s ago: executing program 3 (id=2035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x100008d2}, 0x80) 2m41.221819957s ago: executing program 3 (id=2037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x146, &(0x7f0000000240)={0xfffffffffffffff9, 0x1, 0x5b, 0x7}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r5 = syz_pidfd_open(0x0, 0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x38, 0x1, @thr={&(0x7f0000000780)="7ba2fa632d76b1957dad3bfd3b4ef109efced9e1a23bcaa7c50ae40b35d09e63493af5422a302e7e2438c65bd53f265a02b930896126c67cd206cdd9596b9c0ab66c", &(0x7f0000000080)}}, &(0x7f0000000800)) r6 = dup(r5) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) fdatasync(r7) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2m38.35565953s ago: executing program 3 (id=2045): syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x38, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x5, 0x6, "ac9271", 0x29c5, 0x33, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x2b}, [@routing={0x2b}]}}}}}}}, 0x0) socket(0x2, 0x805, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="93d90400", 0x4}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x108000, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYBLOB="87c21ed4465818ef73bde7252f4e2bbdeabd8e1ae96652d02040e9020aad10b5f3f5633a173558fc5e91795e7daa02c3efc622e68660cd20e18eb7b2dc211f9376b7104df98be74d57609eb462920a7246ec36589adabbbb3cb9cdeebe3bfae7a2f7b688a202301bf83ec33abc95c98a8ef9126f659d3958e9c192d1a6447438c6fe1c82ca4263d748452ffc", @ANYRES64], 0x25, 0x359, &(0x7f0000000bc0)="$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") write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x6e25, 0x2, @empty, 0xc2c2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_getscheduler(r3) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 2m36.484680545s ago: executing program 3 (id=2050): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$eJzs3ctrG8cfAPDvylbev18cCKEtpRh6aEoaObb7SKGH9NyGBtp7KmzFBMtRsOQQu4Emh+ZcQi+lgdJ76bnH0H+gh/4NgTYQSjDtoReVlXcV2Zb8SORHqs8H1szsrDwzmp3RjEZCAQys0fRPIeLliPg6iTgeEUmWNhxZ4ujKdctPbk2lRxLN5qd/Jq3r0nj+v/LHHc0iL0XEL19FnCmsz7e+uDRbrlYr81l8rDF3fay+uHT26lx5pjJTuTYxOXn+ncmJ9997t291ffPS399+8mAoi524l8SFOJbFOuvxHG53RkZjNHtOinFhzYXjfchsP0m6nv1p18vB9gxl/bwY6RhwPIayXg/8930ZEU1gQCXb7v+/FXemJMDuyucB+dq+T+vgF8bjD1cWQOvrP7zy3kgcaq2Njiwnq1ZG6Xp3pA/5p3n8/Mf9e+kR/XsfAmBTt+9ExLnh4fXjX5KNf8/u3BauWZuH8Q92z4N0/vNWt/lPoT3/iS7zn6Nd+u6z2Lz/Fx71IZue0vnfB13nv+1Nq5GhLPa/1pyvmFy5Wq2kY9v/I+J0FA+m8Y32c84vP2z2Suuc/6VHmn8+F8zK8Wj44OrHTJcb5eepc6fHdyJe6Tr/Tdrtn3Rp//T5uLTFPE5V7r/WK23z+u+s5g8Rb3Rt/6c7WsnG+5NjrfthLL8r1vvr7qlfe+W/1/VP2//IxvUfSTr3a+vbz+P7Q/9Uor2fvNqq+sfW7/8DyWet8IHs3M1yozE/HnEg+bh9vpCfn3j62DyeX5/W//TrG49/3e7/wxHx+Rbrf/fkj6/2StsP7T/dtf3bq9s17d8zkN8w65IefvTFd1lac+1AuLXx7+1W6HR2Zivj34YlnX+euxkAAAAAAAD2r0JEHIukUGqHC4VSaeXzHSfjSKFaqzfOXKktXJuO1ndlR6JYyHe6j3d8HmI82zHM4xNr4pMRcSIivhk63IqXpmrV6b2uPAAAAAAAAAAAAAAAAAAAAOwTR3t8/z/1+9Belw7YcX7yGwbXpv2/H7/0BOxLXv9hcOn/MLi22f+TnSoHsPu8/sPg0v9hcOn/MLg6+v/sXpYD2H1e/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCvLl28mB7N5Se3ptL49I3FhdnajbPTlfpsaW5hqjRVm79emqnVZqqV0lRtbrP/V63Vro9PxMLNsUal3hirLy5dnqstXGtcvjpXnqlcrhR3pVYAAAAAAAAAAAAAAAAAAADwYqkvLs2Wq9XKvIDAMwWG90cxBPoc2OuRCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe+jcAAP//iecx8A==") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000000146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001060000000000000000480003006c7a6a6800"/240], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x2, 0x7, 0x80000000, 0x0, 0x82, 0x8, 0x80}, 0x9c) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES16=r6, @ANYRES32=r3, @ANYRESOCT=r7, @ANYRES32=r4], 0xfe37, 0x0) 2m35.607874504s ago: executing program 3 (id=2054): r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x10001, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x2, 0x3, 0x6, 0xf7, 0x0, 0x377, 0x138, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3, 0xe1d}, 0x0, 0x8001, 0x800, 0x7, 0x1, 0x0, 0x6, 0x0, 0x7ff, 0x0, 0x8}) r1 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x83, &(0x7f0000000000)=r2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m34.809263397s ago: executing program 3 (id=2062): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021800001c00000080ffffff0000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900", @ANYRES8=r0], 0xe0}}, 0x0) 2m33.58042667s ago: executing program 37 (id=2062): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021800001c00000080ffffff0000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900", @ANYRES8=r0], 0xe0}}, 0x0) 1m55.653444461s ago: executing program 6 (id=2306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000500020000000900020073797a300000000005000100070000001400078008000840000000d3080006c000000000050004000000000011000300686173683a6e65742c6e6574000000002538"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1m55.549143492s ago: executing program 6 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000a1ffffffffffffff01000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1m55.454212164s ago: executing program 7 (id=2311): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/31, 0x13b, 0x1f, 0x0, 0x1}, 0x28) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x20, 0x8, 0xffffffe0, 0x7ff, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x66, 0x9, 0x1, 0x4, 0x0, @private=0xa010102, @remote, {[@end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@dellink={0x28, 0x11, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0x40044, 0x1000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) 1m54.879854559s ago: executing program 6 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2440001e200001030000000000000000020000000000f07c0f7400000500160011000000f1"], 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r8, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x0, 0x58, 0x0, 0xa, 0x4a0}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 1m54.028542423s ago: executing program 7 (id=2321): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0xf}, 0x8) 1m53.989057505s ago: executing program 7 (id=2322): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x80000004}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x404c0c4}, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$eJzs3c9vVFUbAOD3zrSlpfC1kC/fJy6kiTGQKC0tYIhxAVtDGvwRN26stCBSoKE1WjShJLgxMW6MMXHlQvwvlMiWla5MdOPKkBA1LE0cc2fuLZ32TktLO7cyz5MMc+89c3veYfr2nDlzzp0AOtZQ+k8lYl9EzCQRA8nCYllXZIVDjcfd//PDM+ktiVrt1d+TSLJj+eOT7L4/O7k3In74Pom91ZX1zs5fvTAxPT11Jdsfmbs4MzI7f/XQ+YsT56bOTV0ae37s+LGjx46PHt7Q87pWcOzUjXfeG/h4/I2vv/wrGf3ml/EkTsRL2QOXPo/NMhRD9f+TZGVR//HNrqwk1ez3ZOlLnHSVGBDrkr9+3RHx/xiIajx48Qbio5dLDQ7YUrUkogZ0qET+Q4fK+wH5e/vl74MrpfRKgHa4d7IxALAy/7saY4PRWx8b2Hk/iaXDOklEbGxkrtmuiLhze/zG2dvjN2KLxuGAYgvXI+KJovxP6vk/GL0xWM//SlP+p/2C09l9evyVDda/fKhY/kP7NPK/d9X8jxb5/2Z6v7ux/9YG6x96sPl2X1P+923wJwIAAAAAAEDnunUyIp4r+vy/sjj/Jwrm//RHxIlNqH9o2f7Kz/8rdzehGqDAvZMRLxbO/63ks38Hq9nW7vp8gO7k7PnpqcMR8Z+IOBjdO9L90VXqOPTJ3i9alQ1l8//yW1r/nWwuYBbH3a4dzedMTsxNPOrzBiLuXY94snD+b7LY/icF7X/692DmIevY+8zN063K1s5/YKvUvoo4UNj+P7hqRbL69TlG6v2BkbxXkFmycOipDz79tlX9G81/l5iAR5e2/ztXz//BZOn1embXX8eR+a5aq7KN9v97ktfql5zpyY69PzE3d2U0oic5VU2PNh0fW3/M8DjK8yHPlzT/Dz69+vhfUf+/LyIWlv3s5I/mNcW5//3d/2urePT/oTxp/k+uq/1f/8bYzcHvWtX/cO3/0XpbfzA7YvwPGj7P07Sn+XhBOnYVFbU7XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4HFQiYlckleHF7UpleDiiPyL+Gzsr05dn5549e/ndS5NpWf37/yv5N/0ONPaT/Pv/B5fsjy3bPxIReyLis2pffX/4zOXpybKfPAAAAAAAAAAAAAAAAAAAAGwT/S3W/6d+q5YdHbDlusoOAChNQf7/WEYcQPtp/6FzyX/oXPIfOldx/v/c9jiA9tP+Q+eS/9C55D90LvkPAAAAAACPlT37b/2URMTCC331W6onK+suNTJgq1XKDgAoTeMSP7WywwBKYOoPdC7v8YFkjfLelietdeZqZs48wskAAAAAAAAAAAAA0HEO7LP+HzrVquv/T7cvDqD9qmUHAJQmX/+/v+Q4gPbzHh+INVbyF67/X/MsAAAAAAAAAAAAAGAzzc5fvTAxPT11xcbr2yOMdm7UarVr6W/BdonnX76RT4XfLvEs28jX+j3cWeX9TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr9EwAA//+Fxyb7") r6 = dup(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, 0x0, 0x190) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1m52.523028115s ago: executing program 6 (id=2328): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x509, &(0x7f0000000ac0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x509, &(0x7f0000000ac0)="$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") (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) creat(&(0x7f0000000200)='./bus\x00', 0x268) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) (async) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) (async) 1m52.411406365s ago: executing program 7 (id=2330): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x100, 0x401, 0x3ff}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@dev, @dev, 0x0}, &(0x7f0000001200)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0x4, 0xb, 0x5, 0x1062, r1, 0x1, '\x00', r2, r1, 0x4, 0x3, 0x0, 0x7fffffffffffffff}, 0x50) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), 0x0, 0x0, 0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(r1, &(0x7f0000001180)='./file1\x00', 0x4000, 0x800, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, 0x0, r3, r4, 0x1000) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r3, &(0x7f0000001100)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000100)=""/4096) 1m52.33211145s ago: executing program 7 (id=2331): timer_create(0x1, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @tid=0xffffffffffffffff}, 0x0) (fail_nth: 1) 1m52.135430243s ago: executing program 7 (id=2333): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) epoll_create1(0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) r6 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x2e, 0x5f, 0x3f]}}, 0x0, 0x2d, 0x0, 0x1, 0xfffffb60}, 0x28) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x2204803, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @loopback}, 0x1c) read$usbmon(r7, &(0x7f0000000500)=""/214, 0xd6) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) vmsplice(r9, &(0x7f0000000640)=[{&(0x7f0000000040)="4a9c", 0x2}], 0x1, 0x1) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20a1) timer_create(0x1, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @tid=0xffffffffffffffff}, 0x0) 1m52.00469473s ago: executing program 6 (id=2335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) r1 = syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x10000, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000e50000000000", @ANYRES32=0x0, @ANYRES32], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x51, 0x0, @fd, 0x1, 0x0, 0x7, 0x1}) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x8, 0x9}, 0x50) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x40, 0x400, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x10001, 0xff}]}]}, {0x0, [0x61, 0x30, 0x61, 0x2e]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000980)={r6}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) 1m51.523026301s ago: executing program 6 (id=2343): timer_create(0x1, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @tid=0xffffffffffffffff}, 0x0) (fail_nth: 2) 1m51.507766908s ago: executing program 38 (id=2343): timer_create(0x1, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @tid=0xffffffffffffffff}, 0x0) (fail_nth: 2) 1m36.712751965s ago: executing program 39 (id=2333): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid=']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000000400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) epoll_create1(0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) r6 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x2e, 0x5f, 0x3f]}}, 0x0, 0x2d, 0x0, 0x1, 0xfffffb60}, 0x28) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x2204803, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @loopback}, 0x1c) read$usbmon(r7, &(0x7f0000000500)=""/214, 0xd6) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) vmsplice(r9, &(0x7f0000000640)=[{&(0x7f0000000040)="4a9c", 0x2}], 0x1, 0x1) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20a1) timer_create(0x1, &(0x7f0000001cc0)={0x0, 0x3, 0x4, @tid=0xffffffffffffffff}, 0x0) 33.136072066s ago: executing program 0 (id=2900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x89f2, &(0x7f0000000080)=0x59b) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r2 = socket$packet(0x11, 0x8, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 31.797455609s ago: executing program 0 (id=2921): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="40400201"], 0x7) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc989, 0x0, 0x1, 0x274}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r10, 0x4e14, 0x912a, 0x41, 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) open(&(0x7f0000000000)='./file0\x00', 0x82, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000cc0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, @mcast1, @remote, 0xfff, 0xb89f, 0x4, 0x600, 0x3ff, 0x40340010}) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) socket(0x10, 0x80002, 0x0) r16 = getpid() syz_pidfd_open(r16, 0x0) 31.492115923s ago: executing program 0 (id=2923): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (fail_nth: 3) 31.489985213s ago: executing program 0 (id=2925): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr\nD'], 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32, @ANYBLOB="020000000000000014001280090001007665"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000480001002abd7000ffdbdf250a003800", @ANYRES32=0x0, @ANYBLOB="bb000000080002000500000014000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r3, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000820c0019800800010002000000300001802c0001"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) 31.389472304s ago: executing program 0 (id=2929): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) io_setup(0x8, &(0x7f00000007c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r5 = eventfd(0x9) io_submit(r2, 0x3, &(0x7f0000000480)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f0000000300)="e86e6c01a1519df4ae929d71af100196bf29cba0c9807deb0cff", 0x1a, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000000340)="06996b61a027385f240ba6957aae2088153fa27b154acaaf663d217b5f253e1202595c100bee7269794da3ca4b6994afcf9f9e0426fa2a9ebefbc3eafa8b35f2e7b96f4b5bdebba2ae561e8555a6cf8cb12b97065a47b0ab80232721efd3060d4b435ce402bdbd4c09811e8d3567cbcdcd0db2aebd70ba6ae25ec502b3b291a1a60102d4d6d159af559b10797ae2fa1ad3781263f8debb48dfc47485c43eb95cfb3444a5ef83dc5d1a1208cf1611b193185e9de10e2b39ed445b5fb3c15dcc18fa9f451349373972b6ba3cd7b133838866d9638c8644b2f6dc9a071cc9ba01a434af471a3237be3a", 0xe8, 0x453, 0x0, 0x1}]) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000540)) 30.98801941s ago: executing program 0 (id=2935): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x28) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() syz_usb_connect$cdc_ecm(0x2, 0x56, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000200000008500000087000000850000005000000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = pidfd_getfd(r3, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0xd0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x900}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) r8 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 30.957661305s ago: executing program 40 (id=2935): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x28) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() syz_usb_connect$cdc_ecm(0x2, 0x56, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000200000008500000087000000850000005000000095"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = pidfd_getfd(r3, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0xd0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x900}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) r8 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 23.683518184s ago: executing program 8 (id=2998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xff, 0x0, 0xfe, 0xb}}, 0x1c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bic', 0x3) sendto$inet6(r0, &(0x7f0000000000)='j', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @empty, 0xa5b}, 0x1c) 23.628788434s ago: executing program 8 (id=3000): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xffe0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa720, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeaf, 0x3, 0x6, 0x5}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x8001}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6e}]}}]}}]}, 0xa4}}, 0x20040084) r4 = gettid() ptrace$poke(0x2, r4, &(0x7f0000000040), 0x7) 23.472034035s ago: executing program 8 (id=3002): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dbdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c5) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0xf) (async) r1 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200040000000000000000000000000a00000000"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c00028006000100040000000800", @ANYRES32=r3, @ANYBLOB='\b'], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r1, 0x0) ftruncate(r1, 0x1000000) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.405702403s ago: executing program 8 (id=3003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8a8, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES16=r0], 0x0, 0x31b, &(0x7f0000000b40)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() syz_pidfd_open(r4, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x800) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x891b, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x1358436, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000440)='attr\x00') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES16=r7, @ANYRESDEC=r1, @ANYBLOB="050127b97000ffdbdf250a37e037"], 0x14}, 0x1, 0x0, 0x0, 0x4000845}, 0x20004020) getdents(r6, &(0x7f0000000000)=""/34, 0x22) getdents(r6, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1300810, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x22c3005, 0x0) 23.188060583s ago: executing program 8 (id=3005): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000240)=""/157, 0x9d, 0x0, &(0x7f0000000d40)=""/4096, 0x1000}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x9, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r4, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 21.960887936s ago: executing program 8 (id=3012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000003c0000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 21.920480438s ago: executing program 41 (id=3012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000003c0000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.355880576s ago: executing program 4 (id=3261): unshare(0x22020600) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000054001280080001006774700048000280050005000100000008000200", @ANYRES32=r0, @ANYBLOB="0800040001000000080001009396"], 0x74}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") chdir(&(0x7f00000002c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') epoll_pwait2(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={[0x6]}, 0x8) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f00000024c0)={0xa, 0x7, 0x200000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x20) 2.254739518s ago: executing program 4 (id=3263): msgget(0x1, 0x1a1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0x128) ioprio_set$uid(0x3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getuid() r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x4048010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc4021, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x6, 0x0, 0x0, 0x0, @binary="a260"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x400000, 0x1}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f00000000c0)=0x40001, 0x4) 1.661709238s ago: executing program 9 (id=3268): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900", @ANYRES8=r0], 0xe0}}, 0x0) 1.571874051s ago: executing program 9 (id=3270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x20}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x54}}, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgget$private(0x0, 0x400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={0x0, 0xa8}}, 0x40080) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.440715877s ago: executing program 9 (id=3271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.357631412s ago: executing program 4 (id=3272): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000940)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES64], 0xfe, 0x667, &(0x7f00000002c0)="$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") futex_waitv(&(0x7f0000001dc0)=[{0x1, 0x0, 0x2}, {0xf0, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x3c, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0xd, 0x0, 0x82}, {0x7f5, 0x0, 0x82}, {0x79, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x10000, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0xfb3e, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x10, 0x0, 0x2}, {0x7ff, 0x0, 0x104}, {0x81, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x78f, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x8, 0x0, 0x433b06531bb4e3cd}, {0x1c000000, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0xed45, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}, {0x81, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x3ff, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0xfffffffffffffffc, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x94d7, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x7f, 0x0, 0x2}, {0x4, 0x0, 0x82}], 0x34, 0x0, &(0x7f0000002900)={0x77359400}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 1.357285561s ago: executing program 9 (id=3273): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x6d33, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x800, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r2, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x24000806) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x413, 0x70bd26, 0x40, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x7, 0x4e1f, 0x0, 0xa, 0x20, 0x20, 0x67}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x8000004, 0x4}, {0x4000f6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2020, 0x0) 995.903075ms ago: executing program 4 (id=3280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) read(r3, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 958.567518ms ago: executing program 9 (id=3284): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="03000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000300000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007014802f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 956.863667ms ago: executing program 5 (id=3286): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000400)}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESOCT=r2, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000100)={0x10000, 0x9d4, 0x3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(0xffffffffffffffff, 0x5, 0x4, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r8}}, 0x30) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@setlink={0x30, 0x13, 0x9, 0x70bd2a, 0x25dfdbbe, {0x0, 0x0, 0x0, r9, 0x4706, 0x37eba}, [@IFLA_CARRIER={0x5}, @IFLA_TXQLEN={0x8, 0xd, 0x375f}]}, 0x30}, 0x1, 0x0, 0x0, 0xc00088d}, 0x24068000) shutdown(r4, 0x1) 956.140327ms ago: executing program 2 (id=3287): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xee2b, 0x800, 0xfffffffd, 0x3bb}, &(0x7f0000000dc0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newrule={0x38, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x38}}, 0x80) (async) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) io_setup(0x202, &(0x7f0000000200)) 954.187037ms ago: executing program 2 (id=3289): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000000000)) prlimit64(r5, 0x0, &(0x7f00000001c0)={0x5, 0x8}, &(0x7f0000000200)) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1f, 0x7, 0x7}, {{}, 0x1, 0x0, 0x1000006}, {{}, 0x15, 0xfffd, 0x5}, {{0x0, 0xea60}, 0x11, 0x5, 0x800}, {{0x77359400}, 0x1, 0x6, 0x887}, {{r1, r2/1000+60000}, 0x0, 0x3ff, 0x2}, {{0x0, 0x2710}, 0x0, 0x5, 0x401}, {{r3, r4/1000+10000}, 0x5, 0x7f, 0x101}, {{0x77359400}, 0x11, 0xd, 0x5}], 0xd8) 942.083865ms ago: executing program 2 (id=3290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001305000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7WimlTpS56HmqVGTmdnMaoZFJUQlNiCVkLghxImj2ClN1EUCuy5YIBBIiAV7/gI2dEWFhFjDHrFARVCCBEhIRvfabhM3DhakMc39/aTbnPuwv3NifafnHt+bG0BmnU3+yUUMRsRHEXG0vrr9gLP1H5t3b0wnSy5qtctf5tLjkvXmoc3XHYmI9Yjoi4gn/hfxbO7BuJXVtfmpUqm43Fgfri4sDVdW1y7MLUzNFmeLi6MTFycnJ0bGxyb3rK03X37+5qV3H+t959uX7tx+5f33kmoNNvZtbcdeqje9J45v2XYoIv7zMIJ1QaHRnv5uV4SfJfn8fhcR59L8PxqF9NMEsqBWq9V+qB1ut3u9BhxY+XQMnMsPRUS9nM8PDdXH8L+PgXypXKn+42p5ZXGmPlY+Fj35q3Ol4kjjXOFY9OSS9dG0fH99rGV9PCIdA79a6E/Xh6bLpZn97eqAFkda8v+bQj3/gYxwyg/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9lV6HYFgK7x/z9k0uOXLiVLrXn/+8y11ZX58rULM8XK/NDCyvTQdHl5aWi2XJ5N79lZ+Kn3K5XLS6P/jJXrw9VipTpcWV27slBeWaxeSe/rv1Ls2ZdWAZ04fubWJ7mIWP9Xf7okehv75CocbLVaLrp9DzLQHab+ILtM/UF2OccHWv9Eb+u4oK/dC5fuzxcCj5Z8tysAdM35U77/g6wy/w/ZZf4fsssYH9jhEX3b7Db/DzyazP9Ddg22ef7Xb7Y8u2skIn4bER8Xeg43n/UFHAT5z3ON8f/5o38ZbN3bm/su/YqgNyJeePPy69enqtXl0WT7V/e2V99obB/b8sK2JwxAtzTztJnHAEB2bd69Md1c9jPuF/+tX4TwYPxDjbnJvvQ7yoHN3LZrFXJ7dO3C+kZEnNwpfq7xvPP6iczAZuGB+CcaP3P1t0jreyh9bvr+xD+1Jf6ft8Q//Yt/K5ANt5L+Z2Sn/MunOR338m97/zO4R9dOtO//8vf6v0Kb/u9MhzGee+vFz9rG34g4vWP8Zry+NFZr/KRu5zuMf+fpJ//Qbl/t7fr77BS/KSkNVxeWhiuraxfmFjZmi7PFxdGJi5OTEyPjY5PDV+dKxT8daR//3yc/vL1b+wca8Xui8/Yn2/7WYfu//+MHT53dJf5fz+38+Z/YJX5/RPy9w/hfj336TLt9SfyZNr///C7xk23jHcavvPb/wx0eCgDsg8rq2vxUqVRcVlBQ6Eph49dRjZZCt3sm4GGrrCan5knSd7smAAAAAAAAAAAAQKf243LibrcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAg+DEAAP//KbnRCQ==") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x7c}}, 0x44000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, &(0x7f0000000180)={r1, &(0x7f0000000080)='auto_da_alloc', 0x111000, &(0x7f00000000c0)={@align=0xb41a, {0x9, 0x9, 0x3, 0x5}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x61}) setreuid(0x0, 0xee01) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa0, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_IE={0x65, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @perr={0x84, 0x48, {0x1, 0x4, [{{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_a, 0xf, @value=@broadcast, 0x1e}, {{}, @device_a, 0x5, @void, 0x1a}, {{0x0, 0x1}, @device_b, 0x1000, @value=@broadcast, 0x40}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x69}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48010}, 0x40) 860.278599ms ago: executing program 2 (id=3293): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) 766.864392ms ago: executing program 2 (id=3294): r0 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f40)=@newqdisc={0x24, 0x14, 0xf0b, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xfff1, 0xf}, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 565.388275ms ago: executing program 5 (id=3295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x5b, "f304aeb099fa8bd4ca892eef95d641924b179c4e7165bfda577ef777613f5ecf8d57df5d3a502a769768c8811faccc1287161f48b40268d97378024b47a875cc49a00f5cac14262dfe02baf21977a445054b6ff709b0439a9c139a"}, &(0x7f0000000080)=0x63) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, @in6={0xa, 0x4e20, 0x0, @remote, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xda}, 0x8) ioctl$FICLONE(r0, 0x40049409, r0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/142, &(0x7f00000002c0)=0x8e) r3 = accept4$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000340)=0x1c, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r2, 0x4}, 0x8) r4 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) r6 = getpid() shmctl$IPC_SET(r4, 0x1, &(0x7f0000000480)={{0x3, 0x0, 0xffffffffffffffff, r5, 0x0, 0xa0, 0x3}, 0x7, 0x40, 0x80, 0x3, r6, 0xffffffffffffffff, 0x10}) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000500)=""/222) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000600)={0x2, 'veth0_to_bond\x00', {0x3}, 0x4}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x2, 0x0, {{0x2e, 0x4, 0x0, 0x3e, 0xb8, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x27, 0xb7, [@multicast2, @private=0xa010101, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}, @timestamp_prespec={0x44, 0x4c, 0x70, 0x3, 0x9, [{@local, 0x9}, {@multicast2, 0x9}, {@multicast2, 0x9}, {@remote, 0x1ff}, {@local, 0x9}, {@multicast2, 0x2}, {@loopback, 0x6}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0xfffffffb}]}, @end, @lsrr={0x83, 0x13, 0x6f, [@broadcast, @broadcast, @loopback, @remote]}, @rr={0x7, 0x7, 0x4d, [@private=0xa010101]}, @generic={0x82, 0x8, "255d5b70b063"}, @timestamp_addr={0x44, 0xc, 0x96, 0x1, 0x0, [{@private=0xa010102, 0x48e3a31f}]}]}}}}}) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x40a02, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r3, {0xdf6}}, './file0\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8}, 0x18) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pK \x00'}, 0x20) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c40), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xeb}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0xbd08, 0x41, &(0x7f00000007c0)=""/65, 0x40f00, 0x48, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0xb, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000c80)=[r9, r10, r11, r12, r13, r14], &(0x7f0000000cc0)=[{0x5, 0x2, 0x10, 0xa}, {0x0, 0x5, 0x10, 0x6}, {0x1, 0x2, 0x5, 0x4}, {0x5, 0x1, 0x1, 0xc}, {0x1, 0x3, 0xa, 0x3}, {0x3, 0x3, 0x7}], 0x10, 0xf1}, 0x94) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2f4c0000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040000) ioctl$sock_SIOCGIFBR(r14, 0x8940, &(0x7f0000000f80)=@add_del={0x2, &(0x7f0000000f40)='pimreg1\x00'}) ioctl$XFS_IOC_BULKSTAT(r9, 0x8040587f, &(0x7f00000012c0)={{0x5, 0x5, 0x1, 0x6, 0x9}, &(0x7f0000000fc0)=[{}, {}, {}, {}]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001340)=@int=0x80000000, 0x4) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000001380)=@nbd={'/dev/nbd', 0x0}, r5, 0x0) write$tun(r9, &(0x7f00000013c0)={@void, @val={0x2, 0x1, 0x9, 0xb7, 0x5, 0x2}, @mpls={[{0x1}, {0x40000}, {0x4, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x1}, {0x8}], @ipv4=@gre={{0x43, 0x4, 0x2, 0x6, 0x2b9, 0x66, 0x0, 0xc3, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@cipso={0x86, 0x58, 0x1, [{0x5, 0xb, "4cd30c92825265d679"}, {0x1, 0xb, "a689324ce5b4b4dcc5"}, {0x5, 0x12, "e2e50f3902deb79271c92e7a0f3a1c61"}, {0x2, 0x8, "965ba8ee1a28"}, {0x5, 0x2}, {0x6, 0xf, "ed9d9522c4f121e10eb6eaf79e"}, {0x5, 0xe, "06f6ac2637d95ec144d4931b"}, {0x7, 0x3, "db"}]}, @timestamp_prespec={0x44, 0x4c, 0x64, 0x3, 0x7, [{@rand_addr=0x64010100}, {@multicast2, 0xc}, {@multicast1, 0x9}, {@multicast1, 0x9566}, {@loopback, 0x31}, {@loopback, 0x2}, {@multicast2, 0x214}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@loopback, 0x7}]}, @timestamp={0x44, 0x2c, 0x82, 0x0, 0x4, [0x6, 0x10000, 0x1c, 0x101, 0x2, 0x5, 0x7fffffff, 0xa, 0x4, 0x8a]}, @lsrr={0x83, 0x27, 0xc0, [@local, @empty, @private=0xa010102, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010101, @private=0xa010102]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd2, 0x2, [0x2], "97a5be591c1634bc61837499cc5806ba738ed510c98152b60db4730c01e579808ec80c9115452264ea6bc8d8871fb05784c711535ce145d77e5cb0741382656441738807428e1afb78cc0a17a1b9360b181a0e524234a815eed261907229dac543a92f985b9a30134d2b29e86878026f9d0cb1a2d7f031bee3a28870539142197b72eff764d6ff88e89704c4f58d8c8be51b13590e6e4f4142fa19b79829487a1ecb48b34cc56edc60c467cd57f9ba47af17278898f7a55f77ebd0512bec1aed4ee721c1ec0aacbc94272c9f1d510507a5ff"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x348f], "921c3391160e176d862f235bd0ccb7736ee6812a029f304519966056b209001c2d6fbc1f7d"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "8ca23a4a80311cef8f6d350a3d9e50cac72871ed117f1330a6f13083cbed01e0fd89671ca0c51cf1d23905a44772f75e80a6f91e1b204736971e98655d42f179cf9617c8c4e3b8617f6a6e29b6d7690824202ae1d5d7f8469c93ae02c7c5a10c0ed1322574dc2481122b259763"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3a}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0xe1, 0x0, 0x1, 0x3, 0x1}, 0x2, {0xffffffff, 0x3cbd, 0x3, 0x4, 0x1}}}, {0x8, 0x6558, 0x1, '\''}}}}}, 0x2db) connect$unix(r9, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 503.846424ms ago: executing program 2 (id=3296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r4 = accept$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000001340)={0x7, [], 0x4, "f54ac20a1690f9"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffea3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000200)=0x8001, 0x8) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 391.763143ms ago: executing program 5 (id=3297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x20}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x54}}, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgget$private(0x0, 0x400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={0x0, 0xa8}}, 0x40080) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 311.122318ms ago: executing program 4 (id=3298): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0xcdba, 0x1, 0x2, 0x0, 0x80fd}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt(r1, 0x1, 0x7, &(0x7f0000000000)="fa04e536", 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000040)="5aee41de", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000feffffff850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r2, 0x89f0, 0x0) r3 = socket(0x1e, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x14, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x9b1c93d48c011a49, 0x20880, 0x23456}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) dup3(r3, r4, 0x0) fcntl$setlease(r0, 0x400, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0xbb, 0x58, &(0x7f0000000080)="bc6d87919058460cdd753b5911154fab05f5dae7d1b8870bf87a2373b5478ca9a8fc5243a8952c2e3e2724237f9ab11e43a0fdc89c7992856825d1dc77e1aa513e9e7ed8f57bcfb1bb92813faa915425006e3e18ced6aacb3692ec9c7673c0ba974ef70a493b25df4fae45bfb03f36af406f7877112f245f8915309ba1e12662e35da803c37a04817821c627dd4e77dbf1515624357fc61d5bb2d7b6806fc663d01593972e0cb128458a639af67a04798e58e7a23efce9d531bed3", &(0x7f0000000140)=""/88, 0x8, 0x0, 0x14, 0x83, &(0x7f0000000000)="d1d1a6c3d3a704ff4c5bb2976e5036011d63360a", &(0x7f00000001c0)="70d88d8dfda11bbb2db39b73a14d903884d3fa2cb8fed7789bbc150e4a5c8707425337e0148205b22d3ff9a6d0d014b534eb35178ac89e7fb60f72761051d2f73826d9e873779ef0f6250a5763416884af53ecae1a3ca8fc9882dd0d9efc49d94ce6938813f6daf905ff3071a5346e5d49e7adf324dc3d77ad5ee2c7a904e1322fc54b", 0x2, 0x0, 0xa0a}, 0x50) mknod$loop(&(0x7f0000000400)='./file1\x00', 0x80, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x3, 0x5) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2810, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0xb) 252.075347ms ago: executing program 5 (id=3299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="b000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) 251.718467ms ago: executing program 5 (id=3300): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x23, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) 245.109316ms ago: executing program 1 (id=3301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x10000044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="fffeffffffffffff99480000fdffff0000000300", @ANYRESOCT=r2, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000540)={r4, 0x1, 0xff80}, 0x8) connect$x25(r3, &(0x7f00000002c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) 242.969595ms ago: executing program 4 (id=3302): unshare(0x60400) syz_emit_ethernet(0x17c, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x2d, 0x4, 0x2, 0x5, 0x16e, 0x66, 0x0, 0x10, 0x2, 0x0, @private=0xa010101, @loopback, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x28, 0x42, 0x0, 0x4, [0x50000000, 0xfffffffe, 0x5, 0x3, 0x7, 0x7f, 0x7, 0xa8, 0x9]}, @noop, @rr={0x7, 0xb, 0x3a, [@private=0xa010100, @empty]}, @timestamp={0x44, 0x10, 0xd, 0x0, 0x7, [0x7f, 0x3, 0x100]}, @end, @cipso={0x86, 0x53, 0x3, [{0x7, 0xe, "f443528fa5d2cadceb224712"}, {0x1, 0x2}, {0xaac2edde5fb21b3d, 0x12, "192cf65e625f2ca3766b47b015d656ae"}, {0x4, 0xfffffffffffffc2f, "4f02"}, {0x0, 0x8, "b24d40343c3d"}, {0x6, 0x6, "c9227141"}, {0x6, 0x9, "9f7ef3f89cb3dc"}, {0x2, 0x10, "73d49d2a7dcc249d3a8a7e636eb2"}]}]}}, {0x14, 0x8, 0x0, @loopback, "cc4dae67229b568b702bd3920b5c51838145215fe444f0399a1c7380a949088d2f3c2e0926b1fb22b747ddc3e051f965b32b7f60cbed2013fc3039be8ffea7e5eefe3e6e9833cfe7dfcf415553848e83d05798b9fd5c989de9c2525d26a7fd89588411c96d18e4f33574c83bc916f536eeb7a3a2b39727844a8be53ad695baae800696f56164d61c2f46e76f6483a34207d73143a7c06f1e247eec24cbcf0c4bd04c389fc896d5359dc730965b0bc7d8e70e"}}}}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x30, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) unshare(0x40040000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000080)={0x5, 0xfffffffffffffffe, 0x5f91, 0x5, 0xeb}) modify_ldt$write2(0x11, &(0x7f0000000000)={0xd, 0x20000000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380102000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) getdents(r3, &(0x7f0000001f80)=""/4096, 0x1000) 202.825888ms ago: executing program 1 (id=3303): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x8000) (async) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x8000) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x100, 0x5f}) (async) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x100, 0x5f}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0x8, 0x7fff, 0x8001, 0x7fffffff, 0x1, 0x81, 0x7, 0x8fcf, 0x40, 0xfffffff2, 0xfc, 0x8000000000000000, 0xf, 0x6bb410f9}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001100)={{r2, 0x6, 0x0, 0x2, 0x8, 0x4, 0x7fffffff, 0xffff, 0x3, 0x8000, 0x10000, 0xffffffffffffffff, 0xd0, 0x13b, 0x80}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001100)={{r2, 0x6, 0x0, 0x2, 0x8, 0x4, 0x7fffffff, 0xffff, 0x3, 0x8000, 0x10000, 0xffffffffffffffff, 0xd0, 0x13b, 0x80}}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000002100)=0x4, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000002140)={0x0, 0x4, 0x1, 0x2, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, 0x28) sendto$inet(r1, &(0x7f0000002180)="3e3f6cdd95bbb9ea630562d9adeef675db8560f7662d283fce48a3c78da64915f5149051af2d8248bb6905370edc5030ef935d60f8", 0x35, 0x4000001, &(0x7f00000021c0)={0x2, 0x4e21, @loopback}, 0x10) (async) sendto$inet(r1, &(0x7f0000002180)="3e3f6cdd95bbb9ea630562d9adeef675db8560f7662d283fce48a3c78da64915f5149051af2d8248bb6905370edc5030ef935d60f8", 0x35, 0x4000001, &(0x7f00000021c0)={0x2, 0x4e21, @loopback}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000003240)={'nat\x00', 0x0, 0x3, 0x1000, [0x5, 0x7, 0x4, 0x6bc47e7d, 0x81, 0x181], 0x4, &(0x7f0000002200)=[{}, {}, {}, {}], &(0x7f0000002240)=""/4096}, &(0x7f00000032c0)=0x78) (async) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000003240)={'nat\x00', 0x0, 0x3, 0x1000, [0x5, 0x7, 0x4, 0x6bc47e7d, 0x81, 0x181], 0x4, &(0x7f0000002200)=[{}, {}, {}, {}], &(0x7f0000002240)=""/4096}, &(0x7f00000032c0)=0x78) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000003300)={0x0, 0x7ff, [0x8, 0x3, 0xfffffffffffffff7, 0x10, 0x684, 0x297]}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000003300)={0x0, 0x7ff, [0x8, 0x3, 0xfffffffffffffff7, 0x10, 0x684, 0x297]}) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000003340)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003380)) r4 = creat(&(0x7f00000033c0)='./file0\x00', 0x164) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000034c0)={'syztnl2\x00', &(0x7f0000003440)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x2, 0x0, 0x20, @remote, @rand_addr=' \x01\x00', 0x700, 0x1, 0x3, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000034c0)={'syztnl2\x00', &(0x7f0000003440)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x2, 0x0, 0x20, @remote, @rand_addr=' \x01\x00', 0x700, 0x1, 0x3, 0x8}}) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000003500)=0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000003540)={@empty, @multicast2, 0x0}, &(0x7f0000003580)=0xc) statx(r1, &(0x7f00000035c0)='./file0\x00', 0x800, 0x0, &(0x7f0000003600)) (async) statx(r1, &(0x7f00000035c0)='./file0\x00', 0x800, 0x0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000003c40)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003700)=@polexpire={0x4d4, 0x1b, 0x8, 0x70bd2c, 0x25dfdbfd, {{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, r5, r6}, {0x73, 0x3, 0x7fffffff, 0xa, 0x8, 0xfffffffffffffff8, 0x7, 0x70a}, {0x9, 0xadd, 0x3, 0x5}, 0x10, 0x6e6bb6, 0x1, 0x0, 0x2, 0x1}}, [@algo_auth_trunc={0x140, 0x14, {{'sha256-asm\x00'}, 0x7a0, 0x200, "7206f199d265e99571ba6090d8cd53db73c64a614c6fea0afcef30afbbb01a8a68bf1a14473fc45d85af6d3a039d1fd02cba35857294142eafd7451f7cfbc43147fa8f490cac675ac6b8fc84d2c019ba298d753fe20e9f9af2d5a9d10727904ca415deb9d27630e4b2072db9ed4e38e42c1fa6dbcf2837aa00477c9f081d3857f0b979176571f4a92957b23e634eb1879fb880c6f48f5358088ddb7a885bccdbd9bb43955cce1d17271402785b1b9221dd505a7c2d51b46e37b0abfd511c05d28fb7ae60eec44ddb58020fafc602fbd951445060aa2a0ccf12b3864d5b90279a63a0d97631cb275adee6b83316eb6feb1663a9bd"}}, @sa={0xe4, 0x6, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private0, 0x4e24, 0x401, 0x4e24, 0x0, 0xa, 0xe0, 0x20, 0x2b, r7, r8}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x33}, @in=@local, {0x7, 0x97, 0x8, 0x80, 0x40, 0x253, 0x5, 0x1}, {0xe, 0x1, 0x7, 0x7}, {0x9, 0xa, 0x6}, 0x70bd25, 0x34ff, 0x2, 0x4, 0x1}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@local}}, @tfcpad={0x8, 0x16, 0x80000001}, @migrate={0x134, 0x11, [{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@mcast2, 0x0, 0x4, 0x0, 0x3504, 0x948b25e7069d8f0b, 0xa}, {@in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@rand_addr=0x64010100, @in6=@mcast2, 0x47, 0x3, 0x0, 0x3504, 0x2, 0xa}, {@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0xb8, 0x4, 0x0, 0x3505, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, @in=@private=0xa010101, @in=@private=0xa010102, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}]}, @coaddr={0x14, 0xe, @in=@broadcast}, @tmpl={0x84, 0x5, [{{@in=@local, 0x4d6, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x2, 0x2, 0x6, 0x3, 0x401, 0x9}, {{@in6=@mcast2, 0x4d4, 0x33}, 0xa, @in6=@private0, 0x3507, 0x3, 0x2, 0x2c, 0x7, 0x3, 0x2}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, &(0x7f0000004480)={&(0x7f0000003c80), 0xfffffffa, &(0x7f0000003cc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000004440)}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000044c0)={0x77359400}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000004600)={r1, &(0x7f0000004500)='^&]oW[\x00', 0x219080, &(0x7f0000004540)={@align=0x8000000000000000, {0x4, 0x3, 0x3ff, 0x7}}, 0x81, &(0x7f0000004580), &(0x7f00000045c0)=0x89}) recvfrom(r9, &(0x7f0000004640)=""/4096, 0x1000, 0x12021, &(0x7f0000005640)=@llc={0x1a, 0x101, 0x0, 0xa, 0xe, 0xc, @broadcast}, 0x80) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000056c0)={'veth1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SG_GET_ACCESS_COUNT(r9, 0x2289, &(0x7f0000005700)) (async) ioctl$SG_GET_ACCESS_COUNT(r9, 0x2289, &(0x7f0000005700)) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000005780)={0x10, 0x0, "bb3b3cc9b6fe03b3892ac9cc2bcb8430"}) 202.575418ms ago: executing program 5 (id=3304): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468105f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2004c000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r3, 0x80000001, 0x0) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x5, 0x2, {{0x16, 0x4, 0x2, 0x8, 0x58, 0x64, 0x0, 0x1d, 0x5a, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x42, 0x3, [{0x5, 0x11, "afcb8175809936a3831b9fef750c62"}, {0x6, 0x12, "4695f732e5c922953b8559e6300e8530"}, {0x7, 0x10, "b194e234e75a13df95ff7064e0a1"}, {0x2, 0x9, "b57b1e2fb68c91"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', r6, 0x29, 0x3, 0x2, 0xb81, 0x50, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x44, 0xbfd0}}) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) setxattr$security_capability(0x0, &(0x7f0000000740), 0x0, 0x0, 0x1) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r10 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x10000}) io_uring_enter(r10, 0x627, 0x4c1, 0x43, 0x0, 0x30) 146.231777ms ago: executing program 9 (id=3305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x4, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xc, 0x5, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYBLOB="7b1b7e1fa1a1072e83e72305ad5ae23e12d6013f664ebd236e6ce44e25606fe7ddedfd2352b451186d55308a3fd956", @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e62, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000540)="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", 0x1ba}], 0x1}}], 0x1, 0x48000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001040), 0x120600) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f00000004c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x0, 0x53, 0x7fffffff, r6}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x2, 0x800, 0x2, 0xff7f, 0xa, 0x7, 0xffffffff, {r6, @in6={{0xa, 0x4e23, 0xe, @local, 0x7}}, 0x6, 0x2, 0x8, 0x4, 0xfffffffc}}, &(0x7f0000000100)=0xb0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) syz_emit_ethernet(0x67, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000313a01fe8000000000000000000004009078000000056cf6cd5302003cffee800000000000000000000000000035fe8000000000000000000000000000aa13822252660fdf997fe062e9aaf083273fbd2b939e71b1cdb900000000000000000000000001"], 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r8 = syz_open_pts(r7, 0x0) poll(&(0x7f0000000440)=[{r8, 0x94c9057b468d772f}, {r5, 0x7000}, {0xffffffffffffffff, 0x30a}, {0xffffffffffffffff, 0x60}], 0x4, 0x9e) r9 = dup3(r8, r7, 0x0) ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac2, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="00008100ffffffffffffaa0600000000000000000800450000204000e000062f90787f000001ac141441a001880b000c907801080000"], 0x36) ioctl$EVIOCGRAB(r10, 0x40044590, 0x0) 72.079864ms ago: executing program 1 (id=3306): prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000091) 71.668744ms ago: executing program 1 (id=3307): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) r1 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001180)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001300)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x6, 0xffffff47, 0x54, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x700, 0x80000001, 0x5e5}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x1f, 0x2, &(0x7f0000001380)=ANY=[@ANYRESDEC=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', r2}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r7, &(0x7f00000000c0)=0xa7, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r10}, 0x38) r11 = creat(&(0x7f0000000000)='./file1\x00', 0x4) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r12, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0xf1, 0x1, 0x0, r11, 0x0, 0x0, 0x2000}]) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200"/159], 0xe0}}, 0x0) 69.871353ms ago: executing program 1 (id=3308): setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=0x8000, 0x8, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x48) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, r0, 0x859fb000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 0s ago: executing program 1 (id=3309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) write$tun(r0, &(0x7f00000004c0)={@void, @void, @eth={@broadcast, @empty, @val={@val={0x88a8, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x63, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "562d9ba90683726398023d5cc4caf439005d46e2e099bfb9", "eb835fb65c8b9ae493d4fb662704b8db08835fefb6a4d7ea9378cfc98b077903"}}}}}}}, 0x72) kernel console output (not intermixed with test programs): 295][T14556] R13: 00007fa293e86038 R14: 00007fa293e85fa0 R15: 00007ffe9cd7ca08 [ 387.541315][T14556] [ 387.733869][T14557] loop0: detected capacity change from 0 to 1024 [ 387.867193][T14557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.889679][T14545] lo speed is unknown, defaulting to 1000 [ 387.945572][T14545] lo speed is unknown, defaulting to 1000 [ 387.972824][ T28] audit: type=1400 audit(1773277257.719:2492): avc: denied { rmdir } for pid=14555 comm="syz.0.2713" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.025321][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2710'. [ 388.051479][ T28] audit: type=1400 audit(1773277257.719:2493): avc: denied { rename } for pid=14555 comm="syz.0.2713" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.126110][ T28] audit: type=1400 audit(1773277257.719:2494): avc: denied { reparent } for pid=14555 comm="syz.0.2713" name="file1" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 388.156616][T11447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.231677][ T28] audit: type=1400 audit(1773277257.719:2495): avc: denied { unlink } for pid=14555 comm="syz.0.2713" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 388.365140][ T28] audit: type=1400 audit(1773277258.119:2496): avc: denied { block_suspend } for pid=14587 comm="syz.9.2723" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 388.445788][T14582] loop0: detected capacity change from 0 to 2048 [ 388.486284][ T28] audit: type=1400 audit(1773277258.159:2497): avc: denied { bind } for pid=14575 comm="syz.2.2720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 388.534792][ T7005] loop0: p2 p3 < > p4 < p5 > [ 388.543923][ T7005] loop0: partition table partially beyond EOD, truncated [ 388.561676][ T7005] loop0: p2 start 53543428 is beyond EOD, truncated [ 388.578620][ T7005] loop0: p3 start 4284289 is beyond EOD, truncated [ 388.612198][ T7005] loop0: p5 start 53543428 is beyond EOD, truncated [ 388.634887][T14582] loop0: p2 p3 < > p4 < p5 > [ 388.649699][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 388.659609][T14582] loop0: partition table partially beyond EOD, truncated [ 388.702937][T14582] loop0: p2 start 53543428 is beyond EOD, truncated [ 388.709632][T14582] loop0: p3 start 4284289 is beyond EOD, truncated [ 388.747002][T14602] FAULT_INJECTION: forcing a failure. [ 388.747002][T14602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.786853][T14602] CPU: 0 UID: 0 PID: 14602 Comm: syz.2.2724 Tainted: G W syzkaller #0 PREEMPT(full) [ 388.786887][T14602] Tainted: [W]=WARN [ 388.786941][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.786952][T14602] Call Trace: [ 388.786958][T14602] [ 388.786968][T14602] __dump_stack+0x1d/0x30 [ 388.787017][T14602] dump_stack_lvl+0x95/0xd0 [ 388.787041][T14602] dump_stack+0x15/0x1b [ 388.787064][T14602] should_fail_ex+0x263/0x280 [ 388.787086][T14602] should_fail+0xb/0x20 [ 388.787149][T14602] should_fail_usercopy+0x1a/0x20 [ 388.787171][T14602] _copy_to_iter+0x251/0xea0 [ 388.787193][T14602] ? __pfx_woken_wake_function+0x10/0x10 [ 388.787281][T14602] tty_read+0x1a9/0x490 [ 388.787307][T14602] ? avc_policy_seqno+0x15/0x30 [ 388.787368][T14602] ? selinux_file_permission+0x1f2/0x690 [ 388.787419][T14602] do_iter_readv_writev+0x4fd/0x5a0 [ 388.787442][T14602] vfs_readv+0x1f4/0x6e0 [ 388.787473][T14602] do_readv+0xe9/0x210 [ 388.787498][T14602] __x64_sys_readv+0x45/0x50 [ 388.787555][T14602] x64_sys_call+0x27c0/0x3020 [ 388.787583][T14602] do_syscall_64+0x12c/0x370 [ 388.787606][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.787627][T14602] RIP: 0033:0x7fd8c6ffc799 [ 388.787642][T14602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.787701][T14602] RSP: 002b:00007fd8c5a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 388.787723][T14602] RAX: ffffffffffffffda RBX: 00007fd8c7276090 RCX: 00007fd8c6ffc799 [ 388.787738][T14602] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 388.787753][T14602] RBP: 00007fd8c5a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 388.787765][T14602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.787776][T14602] R13: 00007fd8c7276128 R14: 00007fd8c7276090 R15: 00007fff4e80b778 [ 388.787829][T14602] [ 388.790829][T14582] loop0: p5 start 53543428 is beyond EOD, [ 388.896744][T14605] loop1: detected capacity change from 0 to 128 [ 388.901717][T14601] loop9: detected capacity change from 0 to 1024 [ 388.952783][T14582] truncated [ 388.980423][T14601] EXT4-fs (loop9): filesystem too large to mount safely on this system [ 389.008609][T14605] msdos: Unknown parameter 'ÿÿÿÿ' [ 389.053640][T14601] ip6gre1: entered promiscuous mode [ 389.061018][T14601] ip6gre1: entered allmulticast mode [ 389.165443][T14611] loop8: detected capacity change from 0 to 512 [ 389.174702][T14611] EXT4-fs: Ignoring removed nobh option [ 389.205860][ T2998] loop0: p2 p3 < > p4 < p5 > [ 389.210597][ T2998] loop0: partition table partially beyond EOD, truncated [ 389.218344][ T2998] loop0: p2 start 53543428 is beyond EOD, truncated [ 389.248889][ T2998] loop0: p3 start 4284289 is beyond EOD, truncated [ 389.268603][T14611] EXT4-fs (loop8): orphan cleanup on readonly fs [ 389.308753][ T2998] loop0: p5 start 53543428 is beyond EOD, truncated [ 389.375355][T14611] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2726: EA inode hash validation failed [ 389.426528][T14611] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.2726: corrupted inode contents [ 389.439258][T14611] fserror_report: 3 callbacks suppressed [ 389.439306][T14611] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.472563][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 389.488671][ C1] EXT4-fs (loop8): initial error at time 1773277259: ext4_do_update_inode:5569: inode 15 [ 389.499020][ C1] EXT4-fs (loop8): last error at time 1773277259: ext4_do_update_inode:5569: inode 15 [ 389.512985][T14611] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.2726: mark_inode_dirty error [ 389.542092][T14611] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.547140][T14611] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.2726: corrupted inode contents [ 389.592777][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 389.613908][T14622] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2730'. [ 389.623336][T14622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2730'. [ 389.632665][T14622] netlink: 'syz.0.2730': attribute type 2 has an invalid length. [ 389.632964][T14611] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.673014][T14625] dummy0 speed is unknown, defaulting to 1000 [ 389.675825][T14611] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.2726: mark_inode_dirty error [ 389.708563][T14616] loop9: detected capacity change from 0 to 512 [ 389.719292][T14611] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.720592][T14622] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2730'. [ 389.724665][T14616] EXT4-fs: Ignoring removed nobh option [ 389.746658][T14611] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3002: inode #15: comm syz.8.2726: mark inode dirty (error -117) [ 389.747190][T14626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.760821][T14611] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 389.779676][T14611] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 389.786542][T14622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.831126][T14616] EXT4-fs (loop9): orphan cleanup on readonly fs [ 389.843207][T14625] lo speed is unknown, defaulting to 1000 [ 389.849987][T14611] EXT4-fs (loop8): 1 orphan inode deleted [ 389.863841][T14616] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.2728: EA inode hash validation failed [ 389.895060][T14611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 389.914263][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'. [ 389.919917][T14622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.945909][T14616] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.2728: corrupted inode contents [ 389.964311][T14625] lo speed is unknown, defaulting to 1000 [ 389.981524][T14625] lo speed is unknown, defaulting to 1000 [ 389.993775][T14616] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.000503][T14616] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #15: comm syz.9.2728: mark_inode_dirty error [ 390.010858][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 390.010937][ C1] EXT4-fs (loop9): initial error at time 1773277259: ext4_do_update_inode:5569: inode 15 [ 390.011507][ C1] EXT4-fs (loop9): last error at time 1773277259: ext4_do_update_inode:5569: inode 15 [ 390.058528][T14616] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.062898][ T8243] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.092672][T14616] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.2728: corrupted inode contents [ 390.105123][T14616] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.106227][T14616] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #15: comm syz.9.2728: mark_inode_dirty error [ 390.121937][T14622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.141003][T14616] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.157610][T14616] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3002: inode #15: comm syz.9.2728: mark inode dirty (error -117) [ 390.184788][T14630] loop8: detected capacity change from 0 to 512 [ 390.202438][T14630] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 390.214832][T14616] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.216980][T14616] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 390.259393][T14616] EXT4-fs (loop9): 1 orphan inode deleted [ 390.277217][ T28] audit: type=1400 audit(1773277260.010:2498): avc: denied { write } for pid=14632 comm="syz.1.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 390.315671][T14622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.328787][T14616] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 390.438332][T10060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.489231][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.638284][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.728168][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.898018][ T115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.254422][ T28] audit: type=1400 audit(1773277261.011:2499): avc: denied { create } for pid=14651 comm="syz.8.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 391.517876][T14665] FAULT_INJECTION: forcing a failure. [ 391.517876][T14665] name failslab, interval 1, probability 0, space 0, times 0 [ 391.530891][T14665] CPU: 1 UID: 0 PID: 14665 Comm: syz.9.2744 Tainted: G W syzkaller #0 PREEMPT(full) [ 391.530960][T14665] Tainted: [W]=WARN [ 391.530966][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.530977][T14665] Call Trace: [ 391.530983][T14665] [ 391.530990][T14665] __dump_stack+0x1d/0x30 [ 391.531016][T14665] dump_stack_lvl+0x95/0xd0 [ 391.531059][T14665] dump_stack+0x15/0x1b [ 391.531080][T14665] should_fail_ex+0x263/0x280 [ 391.531153][T14665] should_failslab+0x8c/0xb0 [ 391.531175][T14665] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 391.531195][T14665] ? __d_alloc+0x37/0x340 [ 391.531256][T14665] __d_alloc+0x37/0x340 [ 391.531308][T14665] ? set_normalized_timespec64+0xe0/0x110 [ 391.531330][T14665] d_alloc_pseudo+0x1e/0x80 [ 391.531430][T14665] alloc_file_pseudo+0x91/0x190 [ 391.531460][T14665] aio_setup_ring+0x132/0x750 [ 391.531564][T14665] ioctx_alloc+0x2a9/0x4c0 [ 391.531591][T14665] ? fput+0x8f/0xc0 [ 391.531612][T14665] __se_sys_io_setup+0x6b/0x1b0 [ 391.531641][T14665] __x64_sys_io_setup+0x31/0x40 [ 391.531665][T14665] x64_sys_call+0x24f1/0x3020 [ 391.531757][T14665] do_syscall_64+0x12c/0x370 [ 391.531776][T14665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.531799][T14665] RIP: 0033:0x7f64a694c799 [ 391.531815][T14665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.531892][T14665] RSP: 002b:00007f64a53a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 391.531916][T14665] RAX: ffffffffffffffda RBX: 00007f64a6bc5fa0 RCX: 00007f64a694c799 [ 391.531931][T14665] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000001 [ 391.531945][T14665] RBP: 00007f64a53a7090 R08: 0000000000000000 R09: 0000000000000000 [ 391.531960][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.532086][T14665] R13: 00007f64a6bc6038 R14: 00007f64a6bc5fa0 R15: 00007fff52668c08 [ 391.532102][T14665] [ 391.780969][T14668] loop8: detected capacity change from 0 to 128 [ 391.788262][T14668] ext4: Unknown parameter 'smackfshat' [ 391.806370][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2743'. [ 391.950013][T14670] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2739'. [ 392.131859][T14675] loop1: detected capacity change from 0 to 256 [ 392.230970][T14686] loop9: detected capacity change from 0 to 128 [ 392.389230][T14691] netlink: 'syz.8.2748': attribute type 8 has an invalid length. [ 392.441684][T14692] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2748'. [ 392.496185][T14691] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2748'. [ 392.513439][ T28] audit: type=1400 audit(1773277262.252:2500): avc: denied { wake_alarm } for pid=14689 comm="syz.8.2748" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.645061][ T28] audit: type=1400 audit(1773277262.272:2501): avc: denied { read } for pid=14685 comm="syz.9.2747" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 392.896952][ T28] audit: type=1400 audit(1773277262.272:2502): avc: denied { open } for pid=14685 comm="syz.9.2747" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 393.165818][ T28] audit: type=1400 audit(1773277262.292:2503): avc: denied { accept } for pid=14689 comm="syz.8.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 393.691463][T14726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42000 sclass=netlink_route_socket pid=14726 comm=syz.0.2760 [ 393.720025][ T28] audit: type=1400 audit(1773277263.472:2504): avc: denied { read write } for pid=14727 comm="syz.2.2759" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 393.953749][T14733] FAULT_INJECTION: forcing a failure. [ 393.953749][T14733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.964943][ T28] audit: type=1400 audit(1773277263.472:2505): avc: denied { open } for pid=14727 comm="syz.2.2759" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 393.991837][T14733] CPU: 1 UID: 0 PID: 14733 Comm: syz.2.2764 Tainted: G W syzkaller #0 PREEMPT(full) [ 393.991866][T14733] Tainted: [W]=WARN [ 393.991873][T14733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.991927][T14733] Call Trace: [ 393.991935][T14733] [ 393.991942][T14733] __dump_stack+0x1d/0x30 [ 393.991965][T14733] dump_stack_lvl+0x95/0xd0 [ 393.991984][T14733] dump_stack+0x15/0x1b [ 393.992006][T14733] should_fail_ex+0x263/0x280 [ 393.992056][T14733] should_fail+0xb/0x20 [ 393.992074][T14733] should_fail_usercopy+0x1a/0x20 [ 393.992100][T14733] _copy_from_user+0x1c/0xb0 [ 393.992202][T14733] __sys_bind+0x106/0x290 [ 393.992260][T14733] __x64_sys_bind+0x3f/0x50 [ 393.992279][T14733] x64_sys_call+0x2b30/0x3020 [ 393.992343][T14733] do_syscall_64+0x12c/0x370 [ 393.992370][T14733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.992390][T14733] RIP: 0033:0x7fd8c6ffc799 [ 393.992405][T14733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.992436][T14733] RSP: 002b:00007fd8c5a4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 393.992459][T14733] RAX: ffffffffffffffda RBX: 00007fd8c7275fa0 RCX: 00007fd8c6ffc799 [ 393.992472][T14733] RDX: 0000000000000010 RSI: 0000200000007c80 RDI: 0000000000000003 [ 393.992484][T14733] RBP: 00007fd8c5a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 393.992497][T14733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.992553][T14733] R13: 00007fd8c7276038 R14: 00007fd8c7275fa0 R15: 00007fff4e80b778 [ 393.992570][T14733] [ 394.046522][ T28] audit: type=1400 audit(1773277263.472:2506): avc: denied { remount } for pid=14727 comm="syz.2.2759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 394.187026][ T28] audit: type=1400 audit(1773277263.792:2507): avc: denied { accept } for pid=14730 comm="syz.0.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 394.271557][T14748] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 394.335378][T14748] delete_channel: no stack [ 394.567962][T14758] dummy0 speed is unknown, defaulting to 1000 [ 394.580079][T14758] lo speed is unknown, defaulting to 1000 [ 395.351214][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 395.351230][ T28] audit: type=1400 audit(1773277264.643:2510): avc: denied { getopt } for pid=14752 comm="syz.2.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.533235][T14758] lo speed is unknown, defaulting to 1000 [ 395.540895][T14758] lo speed is unknown, defaulting to 1000 [ 395.802974][T14767] loop8: detected capacity change from 0 to 512 [ 396.024857][T14768] netlink: 'syz.8.2771': attribute type 13 has an invalid length. [ 396.036785][ T28] audit: type=1400 audit(1773277265.793:2511): avc: denied { bind } for pid=14766 comm="syz.8.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 396.077981][T14741] loop9: detected capacity change from 0 to 512 [ 396.111041][T14773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2774'. [ 396.121747][ T28] audit: type=1400 audit(1773277265.873:2512): avc: denied { getopt } for pid=14772 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 396.162594][ T28] audit: type=1400 audit(1773277265.913:2513): avc: denied { create } for pid=14772 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 396.292780][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'. [ 396.406118][T14778] loop1: detected capacity change from 0 to 8192 [ 396.473204][T14778] loop1: p1 p3 p4[EZD] [ 396.480908][T14778] loop1: p1 start 262144 is beyond EOD, truncated [ 396.484158][T14788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2776'. [ 396.495612][T14778] loop1: p3 start 331781 is beyond EOD, truncated [ 396.538421][ T28] audit: type=1400 audit(1773277266.283:2514): avc: denied { create } for pid=14789 comm="syz.9.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 396.568779][T14778] loop1: p4 size 197376 extends beyond EOD, truncated [ 396.571351][T14790] loop9: detected capacity change from 0 to 128 [ 396.629336][ T2998] loop1: p1 p3 p4[EZD] [ 396.633686][ T2998] loop1: p1 start 262144 is beyond EOD, truncated [ 396.642416][ T2998] loop1: p3 start 331781 is beyond EOD, truncated [ 396.658217][ T2998] loop1: p4 size 197376 extends beyond EOD, truncated [ 396.708167][ T28] audit: type=1400 audit(1773277266.453:2515): avc: denied { connect } for pid=14798 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.731698][T14799] netlink: 'syz.1.2781': attribute type 4 has an invalid length. [ 396.744914][ T28] audit: type=1400 audit(1773277266.483:2516): avc: denied { write } for pid=14798 comm="syz.1.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 396.768845][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 396.787308][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 396.797776][ T28] audit: type=1326 audit(1773277266.483:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 396.834130][ T28] audit: type=1326 audit(1773277266.483:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 396.858030][ T28] audit: type=1326 audit(1773277266.483:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14798 comm="syz.1.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 396.921487][T14809] tipc: New replicast peer: 255.255.255.255 [ 396.997656][T14809] tipc: Enabled bearer , priority 10 [ 397.005594][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2785'. [ 397.185895][T14820] loop1: detected capacity change from 0 to 512 [ 397.389012][T14820] EXT4-fs (loop1): 1 truncate cleaned up [ 397.395490][T14820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.577030][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.621638][T14830] xt_connbytes: Forcing CT accounting to be enabled [ 397.735954][T14849] sch_fq: defrate 7 ignored. [ 397.741338][T14849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14849 comm=syz.1.2790 [ 397.838304][T14860] loop0: detected capacity change from 0 to 256 [ 398.155829][T14860] dummy0 speed is unknown, defaulting to 1000 [ 398.167875][T14879] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 398.186859][T14860] lo speed is unknown, defaulting to 1000 [ 398.590297][T14931] loop9: detected capacity change from 0 to 2048 [ 398.633545][T14931] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.658695][T14860] lo speed is unknown, defaulting to 1000 [ 398.664792][T14860] lo speed is unknown, defaulting to 1000 [ 399.289831][T14948] SET target dimension over the limit! [ 399.339202][T14954] netlink: 'syz.0.2798': attribute type 1 has an invalid length. [ 399.357704][T14954] netlink: 'syz.0.2798': attribute type 2 has an invalid length. [ 399.418443][T14936] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 399.464352][T10060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.515970][T14957] dummy0 speed is unknown, defaulting to 1000 [ 399.530290][T14957] lo speed is unknown, defaulting to 1000 [ 399.765443][T14957] lo speed is unknown, defaulting to 1000 [ 399.800903][T14957] lo speed is unknown, defaulting to 1000 [ 400.044027][T15047] loop1: detected capacity change from 0 to 512 [ 400.068032][T15049] program syz.0.2809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.107194][T15051] loop0: detected capacity change from 0 to 2048 [ 400.139440][T15051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.558303][T15077] FAULT_INJECTION: forcing a failure. [ 400.558303][T15077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.706484][T15077] CPU: 1 UID: 0 PID: 15077 Comm: syz.2.2818 Tainted: G W syzkaller #0 PREEMPT(full) [ 400.706516][T15077] Tainted: [W]=WARN [ 400.706522][T15077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.706585][T15077] Call Trace: [ 400.706593][T15077] [ 400.706601][T15077] __dump_stack+0x1d/0x30 [ 400.706629][T15077] dump_stack_lvl+0x95/0xd0 [ 400.706672][T15077] dump_stack+0x15/0x1b [ 400.706690][T15077] should_fail_ex+0x263/0x280 [ 400.706715][T15077] should_fail+0xb/0x20 [ 400.706749][T15077] should_fail_usercopy+0x1a/0x20 [ 400.706775][T15077] _copy_to_iter+0x251/0xea0 [ 400.706816][T15077] ? __pfx_woken_wake_function+0x10/0x10 [ 400.706842][T15077] tty_read+0x1a9/0x490 [ 400.706872][T15077] ? avc_policy_seqno+0x15/0x30 [ 400.706896][T15077] ? selinux_file_permission+0x1f2/0x690 [ 400.706976][T15077] do_iter_readv_writev+0x4fd/0x5a0 [ 400.707004][T15077] vfs_readv+0x1f4/0x6e0 [ 400.707064][T15077] do_readv+0xe9/0x210 [ 400.707084][T15077] __x64_sys_readv+0x45/0x50 [ 400.707103][T15077] x64_sys_call+0x27c0/0x3020 [ 400.707180][T15077] do_syscall_64+0x12c/0x370 [ 400.707203][T15077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.707315][T15077] RIP: 0033:0x7fd8c6ffc799 [ 400.707332][T15077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.707351][T15077] RSP: 002b:00007fd8c5a2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 400.707373][T15077] RAX: ffffffffffffffda RBX: 00007fd8c7276090 RCX: 00007fd8c6ffc799 [ 400.707496][T15077] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 400.707507][T15077] RBP: 00007fd8c5a2e090 R08: 0000000000000000 R09: 0000000000000000 [ 400.707519][T15077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.707530][T15077] R13: 00007fd8c7276128 R14: 00007fd8c7276090 R15: 00007fff4e80b778 [ 400.707547][T15077] [ 401.007930][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 401.007944][ T28] audit: type=1400 audit(1773277270.765:2544): avc: denied { bind } for pid=15080 comm="syz.1.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.044796][T15081] loop1: detected capacity change from 0 to 512 [ 401.051818][T15081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 401.061980][T15083] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2822'. [ 401.071198][T11447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.080558][T15081] EXT4-fs (loop1): 1 truncate cleaned up [ 401.083306][ T28] audit: type=1400 audit(1773277270.765:2545): avc: denied { listen } for pid=15080 comm="syz.1.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.092134][T15081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.119783][ T28] audit: type=1400 audit(1773277270.795:2546): avc: denied { write } for pid=15080 comm="syz.1.2820" path="socket:[44581]" dev="sockfs" ino=44581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.143435][ T28] audit: type=1326 audit(1773277270.845:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15082 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a694c799 code=0x7ffc0000 [ 401.167088][ T28] audit: type=1326 audit(1773277270.845:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15082 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a694c799 code=0x7ffc0000 [ 401.190620][ T28] audit: type=1326 audit(1773277270.845:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15082 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f64a694c799 code=0x7ffc0000 [ 401.222698][ T28] audit: type=1326 audit(1773277270.875:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15082 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a694c799 code=0x7ffc0000 [ 401.246367][ T28] audit: type=1326 audit(1773277270.875:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15082 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64a694c799 code=0x7ffc0000 [ 401.270314][ T28] audit: type=1326 audit(1773277270.875:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f64a690cfce code=0x7ffc0000 [ 401.299941][ T28] audit: type=1326 audit(1773277270.895:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15082 comm="syz.9.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64a694c799 code=0x7ffc0000 [ 401.371504][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.385228][T15083] loop9: detected capacity change from 0 to 512 [ 401.398685][T15096] FAULT_INJECTION: forcing a failure. [ 401.398685][T15096] name failslab, interval 1, probability 0, space 0, times 0 [ 401.446996][T15096] CPU: 0 UID: 0 PID: 15096 Comm: syz.0.2826 Tainted: G W syzkaller #0 PREEMPT(full) [ 401.447030][T15096] Tainted: [W]=WARN [ 401.447038][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.447085][T15096] Call Trace: [ 401.447091][T15096] [ 401.447098][T15096] __dump_stack+0x1d/0x30 [ 401.447125][T15096] dump_stack_lvl+0x95/0xd0 [ 401.447150][T15096] dump_stack+0x15/0x1b [ 401.447172][T15096] should_fail_ex+0x263/0x280 [ 401.447268][T15096] should_failslab+0x8c/0xb0 [ 401.447291][T15096] __kmalloc_noprof+0xb8/0x4e0 [ 401.447315][T15096] ? ioctx_add_table+0xde/0x240 [ 401.447342][T15096] ioctx_add_table+0xde/0x240 [ 401.447413][T15096] ioctx_alloc+0x40e/0x4c0 [ 401.447437][T15096] __se_sys_io_setup+0x6b/0x1b0 [ 401.447459][T15096] __x64_sys_io_setup+0x31/0x40 [ 401.447480][T15096] x64_sys_call+0x24f1/0x3020 [ 401.447527][T15096] do_syscall_64+0x12c/0x370 [ 401.447624][T15096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.447646][T15096] RIP: 0033:0x7f8a3d7ac799 [ 401.447680][T15096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.447698][T15096] RSP: 002b:00007f8a3c207028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 401.447718][T15096] RAX: ffffffffffffffda RBX: 00007f8a3da25fa0 RCX: 00007f8a3d7ac799 [ 401.447734][T15096] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000001 [ 401.447748][T15096] RBP: 00007f8a3c207090 R08: 0000000000000000 R09: 0000000000000000 [ 401.447761][T15096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.447845][T15096] R13: 00007f8a3da26038 R14: 00007f8a3da25fa0 R15: 00007ffd2f8b2618 [ 401.447863][T15096] [ 402.017982][T15121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.092758][T15118] dummy0 speed is unknown, defaulting to 1000 [ 402.178377][T15118] lo speed is unknown, defaulting to 1000 [ 402.196833][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2832'. [ 402.400316][T15118] lo speed is unknown, defaulting to 1000 [ 402.424910][T15118] lo speed is unknown, defaulting to 1000 [ 402.434124][T15136] loop0: detected capacity change from 0 to 8192 [ 402.496777][ T7005] loop0: p1 p2 p3 p4 [ 402.500967][ T7005] loop0: p1 start 51316263 is beyond EOD, truncated [ 402.513028][ T7005] loop0: p2 start 4293394690 is beyond EOD, truncated [ 402.534065][ T7005] loop0: p3 size 100663552 extends beyond EOD, truncated [ 402.549464][ T7005] loop0: p4 size 50331648 extends beyond EOD, truncated [ 402.570511][T15136] loop0: p1 p2 p3 p4 [ 402.610847][T15136] loop0: p1 start 51316263 is beyond EOD, truncated [ 402.627552][T15136] loop0: p2 start 4293394690 is beyond EOD, truncated [ 402.639050][T15136] loop0: p3 size 100663552 extends beyond EOD, truncated [ 402.722618][T15142] veth0: entered promiscuous mode [ 402.798286][T15136] loop0: p4 size 50331648 extends beyond EOD, truncated [ 403.046859][T15142] usb usb7: usbfs: process 15142 (syz.9.2839) did not claim interface 0 before use [ 403.116174][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 403.133984][T10569] udevd[10569]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 403.147915][T15156] netlink: 884 bytes leftover after parsing attributes in process `syz.2.2843'. [ 403.333090][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2839'. [ 403.389245][T15156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15156 comm=syz.2.2843 [ 403.544622][T15166] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 403.544622][T15166] program syz.2.2843 not setting count and/or reply_len properly [ 403.565772][T10569] udevd[10569]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 403.567080][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 403.578778][T15142] xt_CT: No such helper "snmp_trap" [ 403.988957][T15141] veth0: left promiscuous mode [ 404.219441][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2850'. [ 404.316533][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 404.591541][T15205] loop1: detected capacity change from 0 to 512 [ 404.628567][T15205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 404.656774][T15205] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.811939][T15192] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2850'. [ 404.914582][T15183] loop0: detected capacity change from 0 to 4096 [ 404.925751][T15191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.949850][T15191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.958241][T15183] EXT4-fs: quotafile must be on filesystem root [ 404.994040][T15211] loop9: detected capacity change from 0 to 512 [ 405.014567][T15211] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 405.041503][T15211] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 405.060008][T15213] xt_TCPMSS: Only works on TCP SYN packets [ 405.095071][T15211] EXT4-fs (loop9): failed to open journal device unknown-block(8,5) -6 [ 405.599414][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 405.811560][T15246] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 405.857708][T15246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.867621][T15246] bond1: (slave bond2): making interface the new active one [ 405.875482][T15246] bond1: (slave bond2): Enslaving as an active interface with an up link [ 405.894354][T15246] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 405.910265][T15246] vlan2: entered promiscuous mode [ 405.915365][T15246] bond1: entered promiscuous mode [ 405.920390][T15246] bond2: entered promiscuous mode [ 405.925991][T15246] bond1: (slave vlan2): Opening slave failed [ 406.007693][T15252] loop1: detected capacity change from 0 to 512 [ 406.026411][T15252] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.035587][T15252] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 406.044888][T15252] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 406.054059][T15252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 406.062156][T15252] System zones: 0-2, 18-18, 34-34 [ 406.068036][T15252] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2870: bad orphan inode 15 [ 406.078388][T15252] loop1: lost filesystem error report for type 5 error -117 [ 406.078798][T15252] ext4_test_bit(bit=14, block=18) = 1 [ 406.086183][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 406.086204][ C0] EXT4-fs (loop1): initial error at time 1773277275: ext4_orphan_get:1417 [ 406.086223][ C0] EXT4-fs (loop1): last error at time 1773277275: ext4_orphan_get:1417 [ 406.114768][T15252] is_bad_inode(inode)=0 [ 406.118949][T15252] NEXT_ORPHAN(inode)=2264924160 [ 406.123793][T15252] max_ino=32 [ 406.127070][T15252] i_nlink=0 [ 406.190074][T15252] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2870: corrupted inode contents [ 406.202164][T15252] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.203063][T15252] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.2870: mark_inode_dirty error [ 406.223704][T15252] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.226446][T15252] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2870: corrupted inode contents [ 406.247520][T15252] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.248715][T15252] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.2870: mark_inode_dirty error [ 406.269806][T15252] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.270638][T15252] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.2870: mark inode dirty (error -117) [ 406.292418][T15252] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.293489][T15252] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 406.313231][T15252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.046055][T15264] loop9: detected capacity change from 0 to 2048 [ 407.145612][T15258] loop0: detected capacity change from 0 to 2048 [ 407.214890][ T7005] loop9: p2 p3 < > p4 < p5 > [ 407.219703][ T7005] loop9: partition table partially beyond EOD, truncated [ 407.227105][ T7005] loop9: p2 start 53543428 is beyond EOD, truncated [ 408.236010][ T7005] loop9: p3 start 4284289 is beyond EOD, truncated [ 408.264950][ T7005] loop9: p5 start 53543428 is beyond EOD, truncated [ 408.907988][T15258] loop0: p2 p3 < > p4 < p5 > [ 408.914390][T15258] loop0: partition table partially beyond EOD, truncated [ 408.921616][T15258] loop0: p2 start 53543428 is beyond EOD, truncated [ 408.928356][T15258] loop0: p3 start 4284289 is beyond EOD, truncated [ 409.245070][T15258] loop0: p5 start 53543428 is beyond EOD, truncated [ 409.253430][T15264] loop9: p2 p3 < > p4 < p5 > [ 409.268378][T15256] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2870: bg 0: block 80: padding at end of block bitmap is not set [ 409.283713][T15264] loop9: partition table partially beyond EOD, truncated [ 409.364083][T15264] loop9: p2 start 53543428 is beyond EOD, truncated [ 409.373084][T15264] loop9: p3 start 4284289 is beyond EOD, truncated [ 409.385702][T15264] loop9: p5 start 53543428 is beyond EOD, truncated [ 409.430871][T15277] loop8: detected capacity change from 0 to 2048 [ 409.456516][T15277] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 409.467919][T15277] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.484918][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 409.491539][ T28] audit: type=1400 audit(1773277279.249:2686): avc: denied { map } for pid=15263 comm="syz.8.2873" path="/296/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 409.542693][ T28] audit: type=1400 audit(1773277279.249:2687): avc: denied { execute } for pid=15263 comm="syz.8.2873" path="/296/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 409.568006][ T8243] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.578675][ T2998] loop0: p2 p3 < > p4 < p5 > [ 409.587963][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.593986][ T2998] loop0: partition table partially beyond EOD, truncated [ 409.617509][ T2998] loop0: p2 start 53543428 is beyond EOD, truncated [ 409.619441][ T28] audit: type=1400 audit(1773277279.379:2688): avc: denied { connect } for pid=15285 comm="syz.1.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 409.633803][ T2998] loop0: p3 start 4284289 is beyond EOD, truncated [ 409.665470][ T2998] loop0: p5 start 53543428 is beyond EOD, truncated [ 409.705290][T15294] loop0: detected capacity change from 0 to 1024 [ 409.726883][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 409.743862][T15294] dummy0 speed is unknown, defaulting to 1000 [ 409.767861][T15294] lo speed is unknown, defaulting to 1000 [ 409.780259][ T7005] udevd[7005]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 409.794745][ T28] audit: type=1400 audit(1773277279.559:2689): avc: denied { read } for pid=15283 comm="syz.9.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 409.846144][ T28] audit: type=1400 audit(1773277279.599:2690): avc: denied { write } for pid=15286 comm="syz.8.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 409.867148][T15296] loop0: detected capacity change from 0 to 8192 [ 409.887483][T15296] msdos: Unknown parameter 'eâÂ…W†¤ÃFct̹3 íL;-níýý’Û9çž;' [ 409.950755][T15289] bond2: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 409.967716][T15289] bond2 (unregistering): Released all slaves [ 409.994614][T15294] lo speed is unknown, defaulting to 1000 [ 410.000823][T15294] lo speed is unknown, defaulting to 1000 [ 410.058949][ T28] audit: type=1326 audit(1773277279.819:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.0.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d7ac799 code=0x7ffc0000 [ 410.083598][ T28] audit: type=1326 audit(1773277279.849:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.0.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d7ac799 code=0x7ffc0000 [ 410.111261][ T28] audit: type=1326 audit(1773277279.869:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.0.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a3d76cfce code=0x7ffc0000 [ 410.134831][ T28] audit: type=1326 audit(1773277279.869:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.0.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d7ac799 code=0x7ffc0000 [ 410.159400][ T28] audit: type=1326 audit(1773277279.869:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15299 comm="syz.0.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d7ac799 code=0x7ffc0000 [ 411.367127][T15340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15340 comm=syz.0.2890 [ 411.406408][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 411.423374][T15342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2891'. [ 411.424628][T15344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15344 comm=syz.9.2892 [ 411.496551][T15348] 9p: Bad value for 'rfdno' [ 411.511391][T15348] loop0: detected capacity change from 0 to 1024 [ 411.544582][T15348] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2890: bad orphan inode 134217728 [ 411.558389][T15348] loop0: lost filesystem error report for type 5 error -117 [ 411.558887][T15348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.584765][T15352] loop1: detected capacity change from 0 to 512 [ 411.595212][T15352] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 411.607964][T15352] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 411.616573][T15352] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2894: bad orphan inode 4 [ 411.626755][T15352] loop1: lost filesystem error report for type 5 error -117 [ 411.626914][T15352] EXT4-fs (loop1): 1 orphan inode deleted [ 411.634283][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 411.634303][ C1] EXT4-fs (loop1): initial error at time 1773277281: ext4_orphan_get:1417 [ 411.634322][ C1] EXT4-fs (loop1): last error at time 1773277281: ext4_orphan_get:1417 [ 411.686734][T15352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.945401][T15355] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 4: comm syz.1.2894: lblock 0 mapped to illegal pblock 4 (length 1) [ 412.332881][T11447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.472733][T15376] loop0: detected capacity change from 0 to 512 [ 412.499919][T15376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 412.549330][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.560870][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 412.596320][T15386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15386 comm=syz.2.2905 [ 412.609326][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'. [ 412.638694][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2904'. [ 412.648540][T15386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15386 comm=syz.2.2905 [ 412.659190][T15393] loop8: detected capacity change from 0 to 8192 [ 413.003597][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2918'. [ 413.013372][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2918'. [ 413.285463][T15461] dummy0 speed is unknown, defaulting to 1000 [ 413.292437][T15461] lo speed is unknown, defaulting to 1000 [ 413.356604][T15461] lo speed is unknown, defaulting to 1000 [ 413.363217][T15461] lo speed is unknown, defaulting to 1000 [ 413.531338][T15460] loop9: detected capacity change from 0 to 512 [ 413.582617][T15460] vfat: Unknown parameter '' [ 413.878046][T15460] team0: entered allmulticast mode [ 413.892512][T15460] team_slave_0: entered allmulticast mode [ 413.908430][T15460] team_slave_1: entered allmulticast mode [ 413.928774][T15460] dummy0: entered allmulticast mode [ 414.027657][T15496] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2922'. [ 414.044551][T15504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2925'. [ 414.092947][T15513] loop9: detected capacity change from 0 to 164 [ 414.124587][T15513] Unsupported NM flag settings (240) [ 414.346244][ T115] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.393798][ T115] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.463077][T15544] dummy0 speed is unknown, defaulting to 1000 [ 414.470846][ T115] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.488774][T15549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.498289][T15544] lo speed is unknown, defaulting to 1000 [ 414.554425][ T115] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.612246][T15544] lo speed is unknown, defaulting to 1000 [ 414.648959][ T115] bridge_slave_1: left allmulticast mode [ 414.656515][T15544] lo speed is unknown, defaulting to 1000 [ 414.662682][ T115] bridge_slave_1: left promiscuous mode [ 414.668512][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.678589][ T115] bridge_slave_0: left allmulticast mode [ 414.687039][ T115] bridge_slave_0: left promiscuous mode [ 414.693137][ T28] kauditd_printk_skb: 583 callbacks suppressed [ 414.693151][ T28] audit: type=1400 audit(1773277284.461:3279): avc: denied { cpu } for pid=15556 comm="syz.8.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 414.695958][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.795303][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.805214][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.815047][ T115] bond0 (unregistering): Released all slaves [ 414.823298][ T115] bond1 (unregistering): Released all slaves [ 414.941363][ T28] audit: type=1400 audit(1773277284.701:3280): avc: denied { unmount } for pid=10060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 414.999358][T15579] loop8: detected capacity change from 0 to 2048 [ 415.012871][ T28] audit: type=1400 audit(1773277284.751:3281): avc: denied { read } for pid=15573 comm="syz.2.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 415.056865][T15591] loop9: detected capacity change from 0 to 256 [ 415.063692][T15591] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 415.084442][ T115] hsr_slave_0: left promiscuous mode [ 415.090011][ T115] hsr_slave_1: left promiscuous mode [ 415.095896][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.105054][ T115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.126071][T15579] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.138430][T15591] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 415.149475][ T115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.158496][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.168675][ T115] veth1_macvtap: left promiscuous mode [ 415.174711][ T115] veth0_macvtap: left promiscuous mode [ 415.181769][ T115] veth1_vlan: left promiscuous mode [ 415.187038][ T115] veth0_vlan: left promiscuous mode [ 415.477954][ T115] team0 (unregistering): Port device team_slave_1 removed [ 415.539134][ T115] team0 (unregistering): Port device team_slave_0 removed [ 415.724900][T15553] dummy0 speed is unknown, defaulting to 1000 [ 415.737629][T15592] kthread_run failed with err -4 [ 415.755515][T15553] lo speed is unknown, defaulting to 1000 [ 415.907138][T15553] lo speed is unknown, defaulting to 1000 [ 415.913544][T15553] lo speed is unknown, defaulting to 1000 [ 415.944831][ T8243] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.997103][T15639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.058364][ T28] audit: type=1400 audit(1773277285.811:3282): avc: denied { getopt } for pid=15640 comm="syz.8.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 416.090363][T15645] xt_hashlimit: size too large, truncated to 1048576 [ 416.359281][ T28] audit: type=1400 audit(1773277285.821:3283): avc: denied { bind } for pid=15640 comm="syz.8.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 416.381143][T15632] dummy0 speed is unknown, defaulting to 1000 [ 416.391013][T15553] chnl_net:caif_netlink_parms(): no params data found [ 416.518094][T15632] lo speed is unknown, defaulting to 1000 [ 416.538844][ T115] IPVS: stop unused estimator thread 0... [ 416.897359][T15553] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.911206][T15553] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.941334][T15553] bridge_slave_0: entered allmulticast mode [ 416.948072][T15553] bridge_slave_0: entered promiscuous mode [ 416.956557][T15662] netlink: 'syz.8.2954': attribute type 13 has an invalid length. [ 416.959382][ T28] audit: type=1400 audit(1773277542.720:3284): avc: denied { connect } for pid=15661 comm="syz.8.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.996686][T15553] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.021166][T15553] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.028359][T15553] bridge_slave_1: entered allmulticast mode [ 417.041903][T15553] bridge_slave_1: entered promiscuous mode [ 417.151296][ T5985] IPVS: starting estimator thread 0... [ 417.241111][T15668] IPVS: using max 2784 ests per chain, 139200 per kthread [ 417.261066][ T28] audit: type=1400 audit(1773277543.031:3285): avc: denied { getopt } for pid=15661 comm="syz.8.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.302300][T15673] FAULT_INJECTION: forcing a failure. [ 417.302300][T15673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.318898][T15673] CPU: 0 UID: 0 PID: 15673 Comm: syz.9.2955 Tainted: G W syzkaller #0 PREEMPT(full) [ 417.318935][T15673] Tainted: [W]=WARN [ 417.318942][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.318998][T15673] Call Trace: [ 417.319005][T15673] [ 417.319012][T15673] __dump_stack+0x1d/0x30 [ 417.319038][T15673] dump_stack_lvl+0x95/0xd0 [ 417.319060][T15673] dump_stack+0x15/0x1b [ 417.319082][T15673] should_fail_ex+0x263/0x280 [ 417.319122][T15673] should_fail+0xb/0x20 [ 417.319138][T15673] should_fail_usercopy+0x1a/0x20 [ 417.319167][T15673] _copy_from_user+0x1c/0xb0 [ 417.319338][T15673] do_sock_getsockopt+0xf1/0x210 [ 417.319362][T15673] __x64_sys_getsockopt+0x11d/0x1a0 [ 417.319399][T15673] x64_sys_call+0x2dcf/0x3020 [ 417.319439][T15673] do_syscall_64+0x12c/0x370 [ 417.319462][T15673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.319483][T15673] RIP: 0033:0x7f64a694c799 [ 417.319500][T15673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.319517][T15673] RSP: 002b:00007f64a53a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 417.319579][T15673] RAX: ffffffffffffffda RBX: 00007f64a6bc5fa0 RCX: 00007f64a694c799 [ 417.319592][T15673] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 417.319603][T15673] RBP: 00007f64a53a7090 R08: 0000200000000140 R09: 0000000000000000 [ 417.319616][T15673] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 417.319629][T15673] R13: 00007f64a6bc6038 R14: 00007f64a6bc5fa0 R15: 00007fff52668c08 [ 417.319651][T15673] [ 417.529968][T15662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.594159][T15632] lo speed is unknown, defaulting to 1000 [ 417.601129][ T5983] dummy0 speed is unknown, defaulting to 1000 [ 417.607213][ T5983] syz1: Port: 1 Link DOWN [ 417.613853][T15553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.626886][ T8826] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.636315][ T8826] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.650372][ T8826] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.661300][ T8826] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.681622][T15632] lo speed is unknown, defaulting to 1000 [ 417.682687][T15553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.698874][ T8826] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.708883][ T8826] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.722220][ T8826] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.732196][ T8826] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.756511][T15678] 9p: Bad value for 'rfdno' [ 417.762096][T15688] bond2: entered promiscuous mode [ 417.785348][T15553] team0: Port device team_slave_0 added [ 417.795402][T15688] __nla_validate_parse: 5 callbacks suppressed [ 417.795412][T15688] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2958'. [ 417.813313][T15696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2960'. [ 417.824726][T15553] team0: Port device team_slave_1 added [ 417.840230][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2958'. [ 417.872592][T15553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.880803][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.907023][T15553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.918943][T15553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.926330][T15553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.952991][T15553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.994705][T15553] hsr_slave_0: entered promiscuous mode [ 418.000600][T15553] hsr_slave_1: entered promiscuous mode [ 418.006574][T15553] debugfs: 'hsr0' already exists in 'hsr' [ 418.012383][T15553] Cannot create hsr debugfs directory [ 418.092445][T15711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=15711 comm=syz.8.2963 [ 418.394959][T15553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.405302][T15553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.420642][T15748] bond3: entered promiscuous mode [ 418.426043][T15553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.433969][T15748] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2965'. [ 418.445486][T15553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 418.486859][T15553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.504088][T15553] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.518349][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.525518][ T8849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.537301][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.544460][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.562159][T15553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.572603][T15553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.660011][T15553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.717544][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2970'. [ 418.790301][T15809] syzkaller1: entered promiscuous mode [ 418.796565][T15809] syzkaller1: entered allmulticast mode [ 418.824313][T15553] veth0_vlan: entered promiscuous mode [ 418.832349][T15553] veth1_vlan: entered promiscuous mode [ 418.860954][T15553] veth0_macvtap: entered promiscuous mode [ 418.868569][T15553] veth1_macvtap: entered promiscuous mode [ 418.883407][T15553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.905648][T15553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.948883][ T115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.980739][ T115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.011773][ T115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.031716][ T115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.181969][T15861] FAULT_INJECTION: forcing a failure. [ 419.181969][T15861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.267232][ T3386] dummy0 speed is unknown, defaulting to 1000 [ 419.285667][T15861] CPU: 0 UID: 0 PID: 15861 Comm: syz.5.2936 Tainted: G W syzkaller #0 PREEMPT(full) [ 419.285701][T15861] Tainted: [W]=WARN [ 419.285708][T15861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.285719][T15861] Call Trace: [ 419.285724][T15861] [ 419.285790][T15861] __dump_stack+0x1d/0x30 [ 419.285813][T15861] dump_stack_lvl+0x95/0xd0 [ 419.285835][T15861] dump_stack+0x15/0x1b [ 419.285858][T15861] should_fail_ex+0x263/0x280 [ 419.285890][T15861] should_fail+0xb/0x20 [ 419.285975][T15861] should_fail_usercopy+0x1a/0x20 [ 419.286001][T15861] _copy_from_iter+0xcf/0xea0 [ 419.286028][T15861] ? __alloc_skb+0x4f6/0x690 [ 419.286052][T15861] ? __alloc_skb+0x200/0x690 [ 419.286139][T15861] netlink_sendmsg+0x4ae/0x6f0 [ 419.286179][T15861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.286204][T15861] ____sys_sendmsg+0x563/0x5b0 [ 419.286231][T15861] ___sys_sendmsg+0x195/0x1e0 [ 419.286327][T15861] __x64_sys_sendmsg+0xd4/0x160 [ 419.286359][T15861] x64_sys_call+0x194c/0x3020 [ 419.286425][T15861] do_syscall_64+0x12c/0x370 [ 419.286447][T15861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.286470][T15861] RIP: 0033:0x7f17f1ecc799 [ 419.286488][T15861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.286508][T15861] RSP: 002b:00007f17f0927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.286568][T15861] RAX: ffffffffffffffda RBX: 00007f17f2145fa0 RCX: 00007f17f1ecc799 [ 419.286584][T15861] RDX: 0000000000008000 RSI: 0000200000001040 RDI: 0000000000000004 [ 419.286598][T15861] RBP: 00007f17f0927090 R08: 0000000000000000 R09: 0000000000000000 [ 419.286613][T15861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.286627][T15861] R13: 00007f17f2146038 R14: 00007f17f2145fa0 R15: 00007ffeb1018338 [ 419.286648][T15861] [ 419.613198][T15876] netlink: 'syz.8.2978': attribute type 1 has an invalid length. [ 419.644523][ T28] audit: type=1400 audit(1773277545.420:3286): avc: denied { create } for pid=15875 comm="syz.8.2978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 419.699618][ T28] audit: type=1400 audit(1773277545.471:3287): avc: denied { create } for pid=15885 comm="syz.5.2980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 419.762524][ T28] audit: type=1400 audit(1773277545.481:3288): avc: denied { create } for pid=15885 comm="syz.5.2980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 419.765545][T15904] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2978'. [ 419.798601][T15890] siw: device registration error -23 [ 419.809710][ T28] audit: type=1400 audit(1773277545.481:3289): avc: denied { write } for pid=15885 comm="syz.5.2980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 419.849841][ T28] audit: type=1326 audit(1773277545.481:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 419.893639][ T28] audit: type=1326 audit(1773277545.481:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 419.917441][ T28] audit: type=1326 audit(1773277545.511:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 419.971517][ T28] audit: type=1326 audit(1773277545.511:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 420.000263][T15900] veth5: entered promiscuous mode [ 420.030075][T15906] loop1: detected capacity change from 0 to 2048 [ 420.092599][T15890] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 420.354042][ T28] audit: type=1326 audit(1773277545.511:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa293c0c799 code=0x7ffc0000 [ 420.377729][ T28] audit: type=1326 audit(1773277545.511:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa293bccfce code=0x7ffc0000 [ 420.401335][ T28] audit: type=1326 audit(1773277545.511:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15898 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa293c0da97 code=0x7ffc0000 [ 420.494253][T15931] netlink: 'syz.5.2986': attribute type 29 has an invalid length. [ 420.539280][T15942] loop9: detected capacity change from 0 to 512 [ 420.655294][T15942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.676371][T15957] netlink: 'syz.5.2986': attribute type 29 has an invalid length. [ 420.826144][T10060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.429944][T15979] loop9: detected capacity change from 0 to 1024 [ 421.659097][T15974] syzkaller0: entered promiscuous mode [ 421.687759][T15979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.860711][T15994] wireguard0: entered allmulticast mode [ 422.145488][T16037] loop8: detected capacity change from 0 to 128 [ 422.154192][T16037] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 422.661796][T10060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.693564][T16064] loop1: detected capacity change from 0 to 4096 [ 422.706085][T16066] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 422.712612][T16066] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 422.740633][T16064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.779106][T16066] vhci_hcd vhci_hcd.0: Device attached [ 423.014529][T16066] bond1: option mode: invalid value (9) [ 423.049048][ T3386] usb 20-1: SetAddress Request (2) to port 0 [ 423.059681][T16066] bond1 (unregistering): Released all slaves [ 423.069362][ T3386] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 423.159488][T16070] net_ratelimit: 420 callbacks suppressed [ 423.159501][T16070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.395175][T16067] vhci_hcd: connection reset by peer [ 423.403663][ T30] vhci_hcd vhci_hcd.9: stop threads [ 423.410364][ T30] vhci_hcd vhci_hcd.9: release socket [ 423.490428][ T30] vhci_hcd vhci_hcd.9: disconnect device [ 423.506685][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.562697][T16087] loop1: detected capacity change from 0 to 512 [ 423.597995][T16087] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #12: comm syz.1.3010: corrupted in-inode xattr: bad e_name length [ 423.631742][T16087] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 423.632940][T16087] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3010: couldn't read orphan inode 12 (err -117) [ 423.642106][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 423.642131][ C0] EXT4-fs (loop1): initial error at time 1773277549: ext4_iget_extra_inode:5025: inode 12 [ 423.642182][ C0] EXT4-fs (loop1): last error at time 1773277549: ext4_iget_extra_inode:5025: inode 12 [ 423.680184][T16087] loop1: lost filesystem error report for type 5 error -117 [ 423.683985][T16087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.729871][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.781484][T16092] dummy0 speed is unknown, defaulting to 1000 [ 423.815851][T16092] lo speed is unknown, defaulting to 1000 [ 423.827732][T16107] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3017'. [ 423.847548][ T30] bridge_slave_1: left allmulticast mode [ 423.853875][ T30] bridge_slave_1: left promiscuous mode [ 423.868330][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.878959][ T30] bridge_slave_0: left allmulticast mode [ 423.884630][ T30] bridge_slave_0: left promiscuous mode [ 423.902530][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.929230][T16114] loop1: detected capacity change from 0 to 512 [ 423.946647][T16114] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.001941][T16114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.029655][T16114] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.076452][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.088305][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.108144][ T30] bond0 (unregistering): Released all slaves [ 424.115748][ T30] bond1 (unregistering): Released all slaves [ 424.124113][ T30] bond2 (unregistering): Released all slaves [ 424.138262][T16092] lo speed is unknown, defaulting to 1000 [ 424.147127][T16092] lo speed is unknown, defaulting to 1000 [ 424.170109][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.221083][T16133] loop9: detected capacity change from 0 to 512 [ 424.231101][ T30] tipc: Disabling bearer [ 424.254092][ T30] tipc: Disabling bearer [ 424.271264][ T30] tipc: Left network mode [ 424.309971][T16092] chnl_net:caif_netlink_parms(): no params data found [ 424.325231][T16133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.437250][ T30] hsr_slave_0: left promiscuous mode [ 424.443025][T10060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.467953][ T30] hsr_slave_1: left promiscuous mode [ 424.473793][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.516409][ T30] pim6reg (unregistering): left allmulticast mode [ 424.682771][T16167] syzkaller1: entered promiscuous mode [ 424.688454][T16167] syzkaller1: entered allmulticast mode [ 424.701900][T16177] tap0: tun_chr_ioctl cmd 21731 [ 424.749940][T16092] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.765854][T16092] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.781414][T16092] bridge_slave_0: entered allmulticast mode [ 424.788139][T16092] bridge_slave_0: entered promiscuous mode [ 424.813119][T16092] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.832919][T16092] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.840381][T16092] bridge_slave_1: entered allmulticast mode [ 424.864650][T16192] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 424.871188][T16192] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 424.880538][T16092] bridge_slave_1: entered promiscuous mode [ 424.905884][T16092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.931850][T16192] vhci_hcd vhci_hcd.0: Device attached [ 424.961008][T16092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.004719][T16192] bond4: option mode: invalid value (9) [ 425.040755][T16192] bond4 (unregistering): Released all slaves [ 425.090950][T16203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.133586][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3029'. [ 425.209242][T16092] team0: Port device team_slave_0 added [ 425.240791][T16212] xt_recent: Unsupported userspace flags (000000b1) [ 425.247924][ T10] usb 4-1: SetAddress Request (2) to port 0 [ 425.257833][ T10] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 425.286803][T16220] lo speed is unknown, defaulting to 1000 [ 425.343185][T16220] lo speed is unknown, defaulting to 1000 [ 425.349634][T16220] lo speed is unknown, defaulting to 1000 [ 425.414626][T16092] team0: Port device team_slave_1 added [ 425.424955][T16224] loop9: detected capacity change from 0 to 512 [ 425.460807][T16224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.477677][T16203] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 425.495503][T16224] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.510465][T16217] lo speed is unknown, defaulting to 1000 [ 425.521081][T16092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.545602][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.581225][T16092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.596704][T16217] lo speed is unknown, defaulting to 1000 [ 425.600218][T16092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.611235][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.638175][T16092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.639936][T10060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.663502][T16217] lo speed is unknown, defaulting to 1000 [ 425.665266][T16092] hsr_slave_0: entered promiscuous mode [ 425.675675][T16092] hsr_slave_1: entered promiscuous mode [ 425.684108][T16193] vhci_hcd: connection reset by peer [ 425.759165][T16092] debugfs: 'hsr0' already exists in 'hsr' [ 425.765323][ T6181] vhci_hcd vhci_hcd.1: stop threads [ 425.768173][T16092] Cannot create hsr debugfs directory [ 425.770635][ T6181] vhci_hcd vhci_hcd.1: release socket [ 425.783701][ T30] IPVS: stop unused estimator thread 0... [ 425.792567][ T6181] vhci_hcd vhci_hcd.1: disconnect device [ 425.853359][T16239] syzkaller1: entered promiscuous mode [ 425.860509][T16239] syzkaller1: entered allmulticast mode [ 425.971642][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3040'. [ 425.992562][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 425.992577][ T28] audit: type=1400 audit(1773277551.829:3456): avc: denied { setopt } for pid=16255 comm="syz.5.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.021009][T16254] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3040'. [ 426.119831][T16262] loop5: detected capacity change from 0 to 128 [ 426.368019][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 426.494918][T16092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.532376][T16092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 426.568808][T16092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 426.607369][T16092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 426.736887][T16314] syzkaller1: entered promiscuous mode [ 426.756554][T16314] syzkaller1: entered allmulticast mode [ 426.809061][T16092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.835232][T16092] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.845968][T16328] netlink: 'syz.2.3047': attribute type 1 has an invalid length. [ 426.858347][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.865486][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.886533][T16328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.925128][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.932241][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.007441][T16311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.038174][T16311] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 427.053643][T16311] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 427.163182][T16092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.175472][T16358] netlink: 'syz.1.3051': attribute type 2 has an invalid length. [ 427.187042][T16358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3051'. [ 427.263777][T16383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.274566][T16381] loop1: detected capacity change from 0 to 512 [ 427.277980][T16384] random: crng reseeded on system resumption [ 427.280915][ T28] audit: type=1400 audit(2000000000.710:3457): avc: denied { write } for pid=16375 comm="syz.9.3055" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 427.308382][T16384] loop9: detected capacity change from 0 to 128 [ 427.313334][T16367] lo speed is unknown, defaulting to 1000 [ 427.344286][T16384] FAT-fs (loop9): Directory bread(block 32) failed [ 427.369497][T16384] FAT-fs (loop9): Directory bread(block 33) failed [ 427.392227][T16384] FAT-fs (loop9): Directory bread(block 34) failed [ 427.398217][ T28] audit: type=1400 audit(2000000000.820:3458): avc: denied { write } for pid=16389 comm="syz.1.3057" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 427.408855][T16384] FAT-fs (loop9): Directory bread(block 35) failed [ 427.457553][T16384] FAT-fs (loop9): Directory bread(block 36) failed [ 427.464712][T16384] FAT-fs (loop9): Directory bread(block 37) failed [ 427.465667][ T28] audit: type=1400 audit(2000000000.820:3459): avc: denied { ioctl } for pid=16389 comm="syz.1.3057" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 427.471815][T16384] FAT-fs (loop9): Directory bread(block 38) failed [ 427.503554][T16384] FAT-fs (loop9): Directory bread(block 39) failed [ 427.510517][T16384] FAT-fs (loop9): Directory bread(block 40) failed [ 427.531837][ T5987] hid_parser_main: 91 callbacks suppressed [ 427.531868][ T5987] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 427.545362][T16367] lo speed is unknown, defaulting to 1000 [ 427.558452][ T5987] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.587722][T16384] FAT-fs (loop9): Directory bread(block 41) failed [ 427.618180][T16367] lo speed is unknown, defaulting to 1000 [ 427.660562][T16384] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 427.676140][T16092] veth0_vlan: entered promiscuous mode [ 427.683950][T16384] FAT-fs (loop9): Filesystem has been set read-only [ 427.689753][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3054'. [ 427.707378][ T28] audit: type=1400 audit(2000000001.130:3460): avc: denied { ioctl } for pid=16375 comm="syz.9.3055" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 427.742464][T16092] veth1_vlan: entered promiscuous mode [ 427.765341][T16092] veth0_macvtap: entered promiscuous mode [ 427.789476][T16092] veth1_macvtap: entered promiscuous mode [ 427.820579][T16092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.843726][T16092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.864645][ T115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.883318][ T115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.917758][ T115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.950295][ T115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.984288][T16402] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3058'. [ 428.045579][T16444] team0: entered allmulticast mode [ 428.053142][T16444] team_slave_0: entered allmulticast mode [ 428.074784][T16444] team_slave_1: entered allmulticast mode [ 428.138202][T16449] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3059'. [ 428.150569][T16456] netlink: 'syz.5.3060': attribute type 1 has an invalid length. [ 428.162749][T16449] unsupported nlmsg_type 40 [ 428.300058][ T3386] usb 20-1: device descriptor read/8, error -110 [ 428.300516][T16474] loop5: detected capacity change from 0 to 512 [ 428.323511][T16479] Invalid argument reading file caps for ./file0 [ 428.330297][ T28] audit: type=1400 audit(2000000001.751:3461): avc: denied { execute_no_trans } for pid=16478 comm="syz.9.3065" path="/270/file0" dev="tmpfs" ino=1490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.359272][T16474] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3066: iget: bogus i_mode (1) [ 428.400288][T16474] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 428.400497][T16474] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3066: couldn't read orphan inode 15 (err -117) [ 428.409664][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 428.409697][ C0] EXT4-fs (loop5): initial error at time 2000000001: ext4_orphan_get:1391: inode 15 [ 428.409734][ C0] EXT4-fs (loop5): last error at time 2000000001: ext4_orphan_get:1391: inode 15 [ 428.458377][T16474] loop5: lost filesystem error report for type 5 error -117 [ 428.459524][T16474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.459879][ T3386] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 428.496766][T15553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.534294][T16498] vhci_hcd vhci_hcd.0: invalid port number 236 [ 428.547826][T16498] vhci_hcd vhci_hcd.0: invalid port number 236 [ 428.554031][ T28] audit: type=1400 audit(2000000001.961:3462): avc: denied { append } for pid=16497 comm="syz.4.3073" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 428.621524][ T3386] usb 20-1: enqueue for inactive port 0 [ 428.627349][ T3386] usb 20-1: enqueue for inactive port 0 [ 428.642327][ T3386] usb 20-1: enqueue for inactive port 0 [ 428.664380][T16496] ip6gre1: entered promiscuous mode [ 428.838747][T16546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3080'. [ 428.945978][ T28] audit: type=1326 audit(2000000002.321:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbc86c799 code=0x7ffc0000 [ 428.974152][ T3496] IPVS: starting estimator thread 0... [ 428.974542][ T28] audit: type=1326 audit(2000000002.321:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbc86c799 code=0x7ffc0000 [ 429.156671][T16560] loop5: detected capacity change from 0 to 512 [ 429.286652][T16558] IPVS: using max 2400 ests per chain, 120000 per kthread [ 429.438780][ T28] audit: type=1326 audit(2000000002.321:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.4.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefbc86c799 code=0x7ffc0000 [ 429.548080][T16575] netlink: 'syz.2.3086': attribute type 10 has an invalid length. [ 429.627936][T16575] team0: Device wg1 is of different type [ 429.633322][T16590] loop4: detected capacity change from 0 to 512 [ 429.651910][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3086'. [ 429.660956][T16587] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3086'. [ 429.674236][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3086'. [ 429.692759][T16587] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3086'. [ 429.835602][T16605] loop4: detected capacity change from 0 to 512 [ 429.872786][T16605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.919201][T16092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.056472][ T3386] usb usb20-port1: attempt power cycle [ 430.191001][T16644] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3100'. [ 430.339978][T16648] syzkaller1: entered promiscuous mode [ 430.345774][T16648] syzkaller1: entered allmulticast mode [ 430.456518][ T10] usb 4-1: device descriptor read/8, error -110 [ 430.543487][T16659] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 430.564962][T16659] gretap2: entered allmulticast mode [ 430.570491][ T10] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 430.580385][T16659] bond4: (slave gretap2): making interface the new active one [ 430.588659][T16659] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 430.597429][ T10] usb 4-1: enqueue for inactive port 0 [ 430.603012][ T10] usb 4-1: enqueue for inactive port 0 [ 430.608671][ T10] usb 4-1: enqueue for inactive port 0 [ 430.669386][T16665] loop1: detected capacity change from 0 to 512 [ 430.692856][T16665] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 430.716035][T16665] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 430.733807][T16665] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 430.743551][T16665] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 430.751582][T16665] System zones: 0-2, 18-18, 34-35 [ 430.757619][T16665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.799541][T16670] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3107'. [ 430.825641][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.838634][T16676] program syz.4.3111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.892487][T16683] syzkaller1: entered promiscuous mode [ 430.911133][T16683] syzkaller1: entered allmulticast mode [ 430.931782][ T3496] kernel read not supported for file bpf-prog (pid: 3496 comm: kworker/0:8) [ 430.948294][T16685] loop1: detected capacity change from 0 to 512 [ 430.969685][T16685] EXT4-fs: Ignoring removed bh option [ 430.980992][T16685] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.003751][T16685] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 431.021640][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 431.021654][ T28] audit: type=1400 audit(2000000004.452:3492): avc: denied { name_bind } for pid=16695 comm="syz.5.3119" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 431.052278][T16685] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 431.073214][ T28] audit: type=1400 audit(2000000004.502:3493): avc: denied { accept } for pid=16695 comm="syz.5.3119" lport=58294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 431.077617][T16685] EXT4-fs (loop1): orphan cleanup on readonly fs [ 431.107697][T16685] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3109: Invalid block bitmap block 0 in block_group 0 [ 431.121321][T16685] loop1: lost filesystem error report for type 5 error -117 [ 431.121483][T16685] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3109: Invalid block bitmap block 0 in block_group 0 [ 431.125661][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 431.128915][T16685] loop1: lost filesystem error report for type 5 error -117 [ 431.142155][ C1] EXT4-fs (loop1): last error at time 2000000004: ext4_read_block_bitmap_nowait:483 [ 431.153624][T16685] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3109: Invalid block bitmap block 0 in block_group 0 [ 431.155847][ C1] [ 431.181059][T16685] loop1: lost filesystem error report for type 5 error -117 [ 431.182721][T16685] Quota error (device loop1): write_blk: dquota write failed [ 431.197478][T16685] Quota error (device loop1): write_blk: dquota write failed [ 431.204929][T16685] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 431.214961][T16685] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3109: Failed to acquire dquot type 1 [ 431.226554][T16685] loop1: lost filesystem error report for type 5 error -28 [ 431.227534][T16685] Quota error (device loop1): write_blk: dquota write failed [ 431.242305][T16685] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 431.252951][T16685] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3109: Failed to acquire dquot type 1 [ 431.264879][T16685] loop1: lost filesystem error report for type 5 error -28 [ 431.265254][T16685] Quota error (device loop1): write_blk: dquota write failed [ 431.280429][ T28] audit: type=1400 audit(2000000004.722:3494): avc: denied { mounton } for pid=16707 comm="syz.2.3122" path="/proc/556/task" dev="proc" ino=49630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 431.293361][T16685] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 431.313338][T16685] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3109: Failed to acquire dquot type 1 [ 431.325041][T16685] loop1: lost filesystem error report for type 5 error -28 [ 431.325255][T16685] EXT4-fs (loop1): 1 orphan inode deleted [ 431.362648][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'. [ 431.364009][T16685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.425119][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.453133][T16715] loop4: detected capacity change from 0 to 512 [ 431.615204][T16720] loop1: detected capacity change from 0 to 128 [ 431.621751][T16720] msdos: Unknown parameter 'ÿÿÿÿ' [ 431.655821][ T10] usb usb4-port1: attempt power cycle [ 431.935517][ T3386] usb usb20-port1: unable to enumerate USB device [ 432.023932][T16730] loop5: detected capacity change from 0 to 512 [ 432.038958][T16730] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.3129: corrupted inode contents [ 432.051088][T16730] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 432.051623][T16730] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.3129: mark_inode_dirty error [ 432.060707][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 432.060724][ C1] EXT4-fs (loop5): initial error at time 2000000005: ext4_do_update_inode:5569: inode 3 [ 432.060748][ C1] EXT4-fs (loop5): last error at time 2000000005: ext4_do_update_inode:5569: inode 3 [ 432.098769][T16730] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 432.100318][T16730] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.3129: corrupted inode contents [ 432.122263][T16730] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 432.124812][T16730] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.3129: mark_inode_dirty error [ 432.145277][T16730] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 432.147099][T16730] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3129: Failed to acquire dquot type 0 [ 432.168385][T16730] loop5: lost filesystem error report for type 5 error -117 [ 432.169611][T16730] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3129: corrupted inode contents [ 432.189821][T16730] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 432.189987][T16730] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.3129: mark_inode_dirty error [ 432.211173][T16730] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 432.211514][T16730] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3129: corrupted inode contents [ 432.233133][T16730] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 432.233486][T16730] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.3129: mark_inode_dirty error [ 432.254550][T16730] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 432.254774][T16730] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3129: corrupted inode contents [ 432.276641][T16730] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 432.277827][T16730] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 432.294318][T16745] syzkaller1: entered promiscuous mode [ 432.296138][T16730] loop5: lost filesystem error report for type 5 error -117 [ 432.302593][T16730] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.3129: corrupted inode contents [ 432.302933][T16745] syzkaller1: entered allmulticast mode [ 432.310257][T16730] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 432.328322][T16730] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.3129: mark_inode_dirty error [ 432.350121][T16730] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 432.359069][T16730] loop5: lost filesystem error report for type 5 error -117 [ 432.364075][T16730] EXT4-fs (loop5): 1 truncate cleaned up [ 432.378193][T16730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.390978][T16730] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.493545][T15553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.829323][T16812] netlink: 'syz.1.3146': attribute type 29 has an invalid length. [ 432.890203][T16815] netlink: 'syz.9.3147': attribute type 1 has an invalid length. [ 432.898275][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3147'. [ 432.908275][T16815] loop9: detected capacity change from 0 to 128 [ 432.962417][T16819] syzkaller1: entered promiscuous mode [ 432.968454][T16819] syzkaller1: entered allmulticast mode [ 433.064362][T16824] loop1: detected capacity change from 0 to 512 [ 433.074724][T16824] EXT4-fs: inline encryption not supported [ 433.080944][T16824] EXT4-fs: Ignoring removed i_version option [ 433.088987][T16824] EXT4-fs (loop1): 1 orphan inode deleted [ 433.095647][T16824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.110648][T16824] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.3151: Directory hole found for htree leaf block 0 [ 433.133230][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.151747][T16827] loop1: detected capacity change from 0 to 512 [ 433.167055][T16827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.565645][T16835] loop4: detected capacity change from 0 to 4096 [ 433.659918][T16835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.749493][ T10] usb usb4-port1: unable to enumerate USB device [ 433.798583][T16845] netlink: 'syz.9.3157': attribute type 10 has an invalid length. [ 433.830217][T16851] 9pnet_fd: p9_fd_create_unix (16851): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 433.857112][T16835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3154: corrupted inode contents [ 433.966497][T16845] wg1: entered allmulticast mode [ 433.971872][T16845] team0: Device wg1 is of different type [ 433.978576][T16835] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.3154: mark_inode_dirty error [ 433.978736][T16835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3154: corrupted inode contents [ 433.978850][T16835] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3154: mark_inode_dirty error [ 433.979752][T16835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3154: corrupted inode contents [ 433.979910][T16835] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.3154: mark_inode_dirty error [ 433.980029][T16835] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3154: corrupted inode contents [ 433.980245][T16835] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.3154: mark_inode_dirty error [ 433.980377][T16835] EXT4-fs error (device loop4) in ext4_setattr:5983: Corrupt filesystem [ 433.980750][T16855] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.3154: corrupted inode contents [ 434.127528][T16859] EXT4-fs (loop4): shut down requested (2) [ 434.133635][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3160'. [ 434.156293][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.162732][T16861] lo speed is unknown, defaulting to 1000 [ 434.168891][T16835] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 434.197359][T16858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.216278][T16835] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 434.227563][T16835] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 434.229425][T16864] loop1: detected capacity change from 0 to 512 [ 434.245888][T16861] lo speed is unknown, defaulting to 1000 [ 434.275208][T16864] EXT4-fs: inline encryption not supported [ 434.285709][T16864] EXT4-fs: Ignoring removed i_version option [ 434.292343][T16861] lo speed is unknown, defaulting to 1000 [ 434.300162][T16864] EXT4-fs (loop1): 1 orphan inode deleted [ 434.326801][T16864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.346881][T16092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.356291][ T30] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 434.380365][T16877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3165'. [ 434.422158][T16883] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.432248][T16883] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 434.450327][T16864] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.3162: Directory hole found for htree leaf block 0 [ 434.468364][T16883] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 434.487940][T16883] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 434.496623][T16883] System zones: 0-2, 18-18, 34-35 [ 434.502249][T16883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.517564][T16887] lo speed is unknown, defaulting to 1000 [ 434.530264][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.595492][T15553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.618684][T16887] lo speed is unknown, defaulting to 1000 [ 434.630032][T16887] lo speed is unknown, defaulting to 1000 [ 434.731927][T16906] netlink: 'syz.4.3170': attribute type 10 has an invalid length. [ 435.701826][T16906] wg1: entered allmulticast mode [ 435.713480][T16906] team0: Device wg1 is of different type [ 435.843878][T16934] set_capacity_and_notify: 1 callbacks suppressed [ 435.843893][T16934] loop4: detected capacity change from 0 to 164 [ 435.900962][T16945] syzkaller1: entered promiscuous mode [ 435.900981][T16945] syzkaller1: entered allmulticast mode [ 435.902622][T16948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3176'. [ 436.020044][T16957] loop5: detected capacity change from 0 to 1024 [ 436.035650][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 436.035666][ T28] audit: type=1400 audit(2000000009.474:3523): avc: denied { setattr } for pid=16959 comm="syz.4.3183" name="" dev="pipefs" ino=50679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 436.073218][T16957] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.3182: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 436.092141][T16957] EXT4-fs error (device loop5): ext4_quota_enable:7195: comm syz.5.3182: Bad quota inode: 4, type: 1 [ 436.103076][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 436.103095][ C1] EXT4-fs (loop5): initial error at time 2000000009: ext4_ext_check_inode:521: inode 4 [ 436.103144][ C1] EXT4-fs (loop5): last error at time 2000000009: ext4_ext_check_inode:521: inode 4 [ 436.128756][T16957] loop5: lost filesystem error report for type 5 error -117 [ 436.128849][T16957] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 436.151250][T16957] EXT4-fs (loop5): mount failed [ 436.214794][T16973] netlink: 'syz.2.3186': attribute type 10 has an invalid length. [ 436.228204][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 436.260078][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'. [ 436.280624][T16973] team0: Device wg1 is of different type [ 436.302260][T16976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3185'. [ 436.308104][T16975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.327975][T16975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.415628][T16984] lo speed is unknown, defaulting to 1000 [ 436.475866][T16984] lo speed is unknown, defaulting to 1000 [ 436.482330][T16984] lo speed is unknown, defaulting to 1000 [ 436.886343][T16995] loop1: detected capacity change from 0 to 512 [ 436.946920][T17003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3196'. [ 436.956042][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'. [ 437.027165][T17010] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 437.158539][T17010] team0: Device wg1 is of different type [ 437.227307][T17015] syzkaller1: entered promiscuous mode [ 437.235146][T17015] syzkaller1: entered allmulticast mode [ 437.245688][T17017] lo speed is unknown, defaulting to 1000 [ 437.257520][T17019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3202'. [ 437.273529][T17020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.281954][T17017] lo speed is unknown, defaulting to 1000 [ 437.288407][T17017] lo speed is unknown, defaulting to 1000 [ 437.466958][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3200'. [ 437.506103][ T28] audit: type=1400 audit(2000000010.945:3524): avc: denied { firmware_load } for pid=17033 comm="syz.1.3208" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 437.738114][ T28] audit: type=1400 audit(2000000011.135:3525): avc: denied { connect } for pid=17042 comm="syz.2.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 437.833757][T17052] loop5: detected capacity change from 0 to 128 [ 437.840384][T17052] msdos: Unknown parameter 'ÿÿÿÿ' [ 438.160001][T17047] loop1: detected capacity change from 0 to 128 [ 438.166704][T17047] msdos: Unknown parameter 'ÿÿÿÿ' [ 438.423331][T17060] syzkaller1: entered promiscuous mode [ 438.429696][T17060] syzkaller1: entered allmulticast mode [ 438.581157][T17065] loop4: detected capacity change from 0 to 2048 [ 438.601189][T17076] tipc: Trying to set illegal importance in message [ 438.621126][T17079] macvlan0: entered allmulticast mode [ 438.624185][ T28] audit: type=1400 audit(2000000012.056:3526): avc: denied { getopt } for pid=17073 comm="syz.9.3221" lport=36225 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 438.721298][T17079] macvlan0 (unregistering): left allmulticast mode [ 438.764846][T17065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.785792][T17065] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.341554][ T115] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 439.358109][ T115] EXT4-fs (loop4): Remounting filesystem read-only [ 439.369600][T17119] loop1: detected capacity change from 0 to 256 [ 439.379576][T16092] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.393287][T17111] netlink: 'syz.2.3230': attribute type 2 has an invalid length. [ 439.450280][T17127] netlink: 'syz.9.3234': attribute type 2 has an invalid length. [ 439.470323][T17126] __nla_validate_parse: 4 callbacks suppressed [ 439.470439][T17126] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3235'. [ 439.514332][T17131] 9p: Unknown Cache mode or invalid value l [ 439.520947][T17131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.537480][ T28] audit: type=1400 audit(2000000012.976:3527): avc: denied { accept } for pid=17132 comm="syz.5.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.540380][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3235'. [ 439.557879][T17125] syzkaller1: entered promiscuous mode [ 439.573695][T17125] syzkaller1: entered allmulticast mode [ 439.589139][ T28] audit: type=1400 audit(2000000012.976:3528): avc: denied { read } for pid=17132 comm="syz.5.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.616552][ T3496] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0 [ 439.626899][ T28] audit: type=1400 audit(2000000013.056:3529): avc: denied { ioctl } for pid=17123 comm="syz.2.3235" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 439.661312][ T3496] hid-generic 0080:0005:FFFFFFFE.0003: unknown main item tag 0x0 [ 439.670209][ T3496] hid-generic 0080:0005:FFFFFFFE.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 439.680339][ T28] audit: type=1400 audit(2000000013.106:3530): avc: denied { ioctl } for pid=17132 comm="syz.5.3237" path="socket:[51437]" dev="sockfs" ino=51437 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 439.749524][T17148] fido_id[17148]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 439.935226][T17171] tipc: Started in network mode [ 439.940779][T17171] tipc: Node identity ba6e05f317df, cluster identity 4711 [ 440.017234][T17171] tipc: Enabled bearer , priority 0 [ 440.063628][T17171] syzkaller0: entered promiscuous mode [ 440.069488][T17171] syzkaller0: entered allmulticast mode [ 440.469442][T17177] netlink: 'syz.1.3249': attribute type 10 has an invalid length. [ 440.523745][T17177] team0: Device wg1 is of different type [ 440.564116][T17164] syz.5.3245 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 440.569123][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3249'. [ 440.609865][T17184] netlink: 'syz.9.3250': attribute type 10 has an invalid length. [ 440.611706][T17178] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3249'. [ 440.618576][T17164] CPU: 1 UID: 0 PID: 17164 Comm: syz.5.3245 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.618617][T17164] Tainted: [W]=WARN [ 440.618625][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.618638][T17164] Call Trace: [ 440.618645][T17164] [ 440.618652][T17164] __dump_stack+0x1d/0x30 [ 440.618712][T17164] dump_stack_lvl+0x95/0xd0 [ 440.618742][T17164] dump_stack+0x15/0x1b [ 440.618764][T17164] dump_header+0x80/0x240 [ 440.618787][T17164] oom_kill_process+0x295/0x350 [ 440.618939][T17164] out_of_memory+0x97d/0xb80 [ 440.618962][T17164] try_charge_memcg+0x62e/0xa10 [ 440.618999][T17164] obj_cgroup_charge_pages+0x23/0xc0 [ 440.619092][T17164] __memcg_kmem_charge_page+0x9e/0x170 [ 440.619120][T17164] __alloc_frozen_pages_noprof+0x18a/0x360 [ 440.619151][T17164] alloc_pages_mpol+0xb3/0x260 [ 440.619204][T17164] alloc_pages_noprof+0x8f/0x130 [ 440.619231][T17164] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 440.619343][T17164] __kvmalloc_node_noprof+0x3d4/0x650 [ 440.619368][T17164] ? futex_hash_allocate+0x190/0x9d0 [ 440.619395][T17164] ? futex_hash_allocate+0x190/0x9d0 [ 440.619501][T17164] futex_hash_allocate+0x190/0x9d0 [ 440.619529][T17164] ? cap_task_prctl+0x13f/0x6e0 [ 440.619552][T17164] futex_hash_prctl+0xd8/0xf0 [ 440.619578][T17164] __se_sys_prctl+0xa3d/0x13f0 [ 440.619759][T17164] __x64_sys_prctl+0x67/0x80 [ 440.619785][T17164] x64_sys_call+0x2533/0x3020 [ 440.619811][T17164] do_syscall_64+0x12c/0x370 [ 440.619832][T17164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.619877][T17164] RIP: 0033:0x7f17f1ecc799 [ 440.619893][T17164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.619910][T17164] RSP: 002b:00007f17f0906028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 440.619928][T17164] RAX: ffffffffffffffda RBX: 00007f17f2146090 RCX: 00007f17f1ecc799 [ 440.620002][T17164] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 440.620016][T17164] RBP: 00007f17f1f62c99 R08: 0000000000000000 R09: 0000000000000000 [ 440.620030][T17164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.620044][T17164] R13: 00007f17f2146128 R14: 00007f17f2146090 R15: 00007ffeb1018338 [ 440.620063][T17164] [ 440.620098][T17164] memory: usage 307200kB, limit 307200kB, failcnt 924 [ 440.681085][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3249'. [ 440.733728][T17164] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 440.850903][T17178] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3249'. [ 440.853539][T17164] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 440.893728][T17164] Memory cgroup stats for /syz5: [ 440.894005][T17164] cache 0 [ 440.901880][T17164] rss 0 [ 440.904636][T17164] shmem 0 [ 440.907568][T17164] mapped_file 0 [ 440.911335][T17164] dirty 0 [ 440.914270][T17164] writeback 0 [ 440.917548][T17164] workingset_refault_anon 264 [ 440.919498][T17184] team0: Device wg1 is of different type [ 440.922272][T17164] workingset_refault_file 0 [ 440.922283][T17164] swap 196608 [ 440.922290][T17164] swapcached 81580032 [ 440.922298][T17164] pgpgin 241009 [ 440.922317][T17164] pgpgout 241004 [ 440.922342][T17164] pgfault 179845 [ 440.922350][T17164] pgmajfault 116 [ 440.922357][T17164] inactive_anon 0 [ 440.922365][T17164] active_anon 8192 [ 440.922374][T17164] inactive_file 0 [ 440.922381][T17164] active_file 12288 [ 440.922389][T17164] unevictable 0 [ 440.922395][T17164] hierarchical_memory_limit 314572800 [ 440.922413][T17164] hierarchical_memsw_limit 9223372036854771712 [ 440.922422][T17164] total_cache 0 [ 440.922428][T17164] total_rss 0 [ 440.922434][T17164] total_shmem 0 [ 440.922442][T17164] total_mapped_file 0 [ 440.922463][T17164] total_dirty 0 [ 440.922471][T17164] total_writeback 0 [ 440.922479][T17164] total_workingset_refault_anon 264 [ 440.922488][T17164] total_workingset_refault_file 0 [ 440.922497][T17164] total_swap 196608 [ 440.922505][T17164] total_swapcached 81580032 [ 440.922513][T17164] total_pgpgin 241009 [ 440.922520][T17164] total_pgpgout 241004 [ 440.922527][T17164] total_pgfault 179845 [ 440.922587][T17164] total_pgmajfault 116 [ 440.922596][T17164] total_inactive_anon 0 [ 440.922604][T17164] total_active_anon 8192 [ 440.922612][T17164] total_inactive_file 0 [ 440.922621][T17164] total_active_file 12288 [ 440.922629][T17164] total_unevictable 0 [ 440.922638][T17164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3245,pid=17161,uid=0 [ 441.079126][T17164] Memory cgroup out of memory: Killed process 17161 (syz.5.3245) total-vm:94164kB, anon-rss:1224kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 441.179465][T17204] loop4: detected capacity change from 0 to 1764 [ 441.204799][T17170] tipc: Resetting bearer [ 441.221631][T17170] tipc: Disabling bearer [ 441.229194][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3250'. [ 441.239142][T17196] netlink: 196 bytes leftover after parsing attributes in process `syz.9.3250'. [ 441.314672][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3250'. [ 441.328205][T17196] netlink: 196 bytes leftover after parsing attributes in process `syz.9.3250'. [ 441.517502][T17218] FAULT_INJECTION: forcing a failure. [ 441.517502][T17218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.555733][T17218] CPU: 1 UID: 0 PID: 17218 Comm: syz.1.3256 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.555774][T17218] Tainted: [W]=WARN [ 441.555781][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.555803][T17218] Call Trace: [ 441.555810][T17218] [ 441.555819][T17218] __dump_stack+0x1d/0x30 [ 441.555842][T17218] dump_stack_lvl+0x95/0xd0 [ 441.555917][T17218] dump_stack+0x15/0x1b [ 441.555936][T17218] should_fail_ex+0x263/0x280 [ 441.555963][T17218] should_fail+0xb/0x20 [ 441.555984][T17218] should_fail_usercopy+0x1a/0x20 [ 441.556059][T17218] _copy_to_user+0x20/0xa0 [ 441.556082][T17218] simple_read_from_buffer+0xb5/0x130 [ 441.556108][T17218] proc_fail_nth_read+0x10e/0x150 [ 441.556219][T17218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.556249][T17218] vfs_read+0x1ab/0x7f0 [ 441.556278][T17218] ? __rcu_read_unlock+0x4e/0x70 [ 441.556313][T17218] ? __fget_files+0x184/0x1c0 [ 441.556334][T17218] ? mutex_lock+0x57/0x90 [ 441.556356][T17218] ksys_read+0xdc/0x1a0 [ 441.556471][T17218] __x64_sys_read+0x40/0x50 [ 441.556561][T17218] x64_sys_call+0x2886/0x3020 [ 441.556588][T17218] do_syscall_64+0x12c/0x370 [ 441.556678][T17218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.556698][T17218] RIP: 0033:0x7fa293bccfce [ 441.556714][T17218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.556731][T17218] RSP: 002b:00007fa29265efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.556753][T17218] RAX: ffffffffffffffda RBX: 00007fa29265f6c0 RCX: 00007fa293bccfce [ 441.556766][T17218] RDX: 000000000000000f RSI: 00007fa29265f0a0 RDI: 0000000000000004 [ 441.556833][T17218] RBP: 00007fa29265f090 R08: 0000000000000000 R09: 0000000000000000 [ 441.556848][T17218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.556862][T17218] R13: 00007fa293e86038 R14: 00007fa293e85fa0 R15: 00007ffe9cd7ca08 [ 441.556883][T17218] [ 442.071664][ T10] tipc: Node number set to 2914059763 [ 442.554949][T17228] netlink: 'syz.1.3257': attribute type 11 has an invalid length. [ 442.572151][T17228] loop1: detected capacity change from 0 to 512 [ 442.682896][T17228] EXT4-fs (loop1): orphan cleanup on readonly fs [ 442.690617][T17228] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.3257: ea_inode with extended attributes [ 442.703313][T17228] fserror_report: 2 callbacks suppressed [ 442.703324][T17228] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 442.713487][T17228] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.3257: error while reading EA inode 11 err=-117 [ 442.722669][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 442.722685][ C1] EXT4-fs (loop1): initial error at time 2000000016: ext4_xattr_inode_iget:441: inode 11 [ 442.722712][ C1] EXT4-fs (loop1): last error at time 2000000016: ext4_xattr_inode_iget:441: inode 11 [ 442.760864][T17228] loop1: lost filesystem error report for type 5 error -117 [ 442.762113][T17228] EXT4-fs (loop1): 1 orphan inode deleted [ 442.775520][T17228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.781876][T17231] lo speed is unknown, defaulting to 1000 [ 442.832102][T17232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.058189][T17231] lo speed is unknown, defaulting to 1000 [ 443.090511][T17231] lo speed is unknown, defaulting to 1000 [ 443.167055][T13397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.196648][T17255] loop4: detected capacity change from 0 to 128 [ 443.463707][ T28] audit: type=1400 audit(2000000016.898:3531): avc: denied { setopt } for pid=17264 comm="syz.4.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 443.532785][ T5983] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 443.602033][T17278] loop5: detected capacity change from 0 to 512 [ 443.619196][ T5983] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.683251][T17278] EXT4-fs: Ignoring removed oldalloc option [ 443.849067][T17278] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3267: invalid indirect mapped block 4294967295 (level 1) [ 443.896401][T17278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 443.896616][T17278] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3267: invalid indirect mapped block 4294967295 (level 1) [ 443.905819][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 443.905841][ C0] EXT4-fs (loop5): initial error at time 2000000017: ext4_free_branches:1023: inode 11 [ 443.905878][ C0] EXT4-fs (loop5): last error at time 2000000017: ext4_free_branches:1023: inode 11 [ 443.946369][T17278] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 443.949352][T17278] EXT4-fs (loop5): 2 truncates cleaned up [ 443.964911][T17278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.015791][ T28] audit: type=1400 audit(2000000017.448:3532): avc: denied { map } for pid=17274 comm="syz.5.3267" path="/47/file0/blkio.bfq.io_queued_recursive" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 444.172387][T15553] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.183906][T17302] loop4: detected capacity change from 0 to 164 [ 444.200440][T17302] Unable to read rock-ridge attributes [ 444.216588][T17302] Unable to read rock-ridge attributes [ 444.228892][T17302] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 444.363983][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 444.452119][ T5983] IPVS: starting estimator thread 0... [ 444.490441][T17334] loop5: detected capacity change from 0 to 512 [ 444.496944][T17338] loop9: detected capacity change from 0 to 2048 [ 444.501388][T17334] vfat: Unknown parameter '' [ 444.549065][T17330] IPVS: using max 2544 ests per chain, 127200 per kthread [ 444.582080][T17338] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.657199][ T28] audit: type=1400 audit(2000000018.089:3533): avc: denied { setopt } for pid=17358 comm="syz.1.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 444.831245][T17366] bond2: Unable to set up delay as MII monitoring is disabled [ 444.844915][T17366] bond2 (unregistering): Released all slaves [ 444.988065][ T28] audit: type=1400 audit(2000000018.419:3534): avc: denied { write } for pid=17370 comm="syz.5.3295" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 445.015594][T17372] sctp: [Deprecated]: syz.5.3295 (pid 17372) Use of int in max_burst socket option deprecated. [ 445.015594][T17372] Use struct sctp_assoc_value instead [ 445.361769][T10060] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.362879][T17387] lo speed is unknown, defaulting to 1000 [ 445.512921][T17387] lo speed is unknown, defaulting to 1000 [ 445.526705][T17387] lo speed is unknown, defaulting to 1000 [ 445.544447][ T30] ================================================================== [ 445.552544][ T30] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 445.560791][ T30] [ 445.563110][ T30] write to 0xffff88812ff44d08 of 44 bytes by task 17407 on cpu 0: [ 445.570900][ T30] tty_set_termios+0xc0/0x910 [ 445.575589][ T30] set_termios+0x4a7/0x4f0 [ 445.580013][ T30] tty_mode_ioctl+0x37f/0x5b0 [ 445.584686][ T30] n_tty_ioctl_helper+0x87/0x370 [ 445.589622][ T30] n_tty_ioctl+0x101/0x230 [ 445.594043][ T30] tty_ioctl+0x83e/0xb80 [ 445.598281][ T30] __se_sys_ioctl+0xce/0x140 [ 445.602867][ T30] __x64_sys_ioctl+0x43/0x50 [ 445.607455][ T30] x64_sys_call+0x1563/0x3020 [ 445.612123][ T30] do_syscall_64+0x12c/0x370 [ 445.616711][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.622599][ T30] [ 445.624915][ T30] read to 0xffff88812ff44d21 of 1 bytes by task 30 on cpu 1: [ 445.632280][ T30] n_tty_lookahead_flow_ctrl+0x126/0x300 [ 445.637917][ T30] tty_port_default_lookahead_buf+0x91/0xc0 [ 445.643907][ T30] flush_to_ldisc+0x288/0x340 [ 445.648580][ T30] process_scheduled_works+0x4de/0x9e0 [ 445.654042][ T30] worker_thread+0x581/0x770 [ 445.658638][ T30] kthread+0x22a/0x280 [ 445.662691][ T30] ret_from_fork+0x150/0x360 [ 445.667282][ T30] ret_from_fork_asm+0x1a/0x30 [ 445.672047][ T30] [ 445.674358][ T30] value changed: 0x11 -> 0x77 [ 445.679017][ T30] [ 445.681327][ T30] Reported by Kernel Concurrency Sanitizer on: [ 445.687461][ T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 445.698304][ T30] Tainted: [W]=WARN [ 445.702093][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.712135][ T30] Workqueue: events_unbound flush_to_ldisc [ 445.718024][ T30] ==================================================================