last executing test programs: 50.415011178s ago: executing program 3 (id=27): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$netlink(0x10, 0x3, 0xb) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast1, @multicast2}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) ioctl$sock_ifreq(0xffffffffffffffff, 0x891a, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x453, 0x4, 0x70bd2a, 0x25dfdbfe, '\a'}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r5 = accept4$packet(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x80800) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x4faa, 0x5, 0x79, 0x7}, {0xcdc4, 0x3, 0x7, 0x3}, {0x1, 0x81, 0xf8, 0xffffe343}, {0x1, 0x3, 0x6, 0xffffff49}, {0x9a, 0x2, 0x5, 0x3}, {0x5, 0x1, 0x3, 0x820a}, {0x7ff, 0xb, 0x81, 0x100}]}, 0x10) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) dup2(r6, r7) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, 0x0) sendto$packet(r3, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x6, 0x0, 0x3, 0x7fff7ffc}, {0xad, 0x5, 0x7f, 0xf}, {0x7, 0x1, 0xe, 0x7}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) 49.547483165s ago: executing program 3 (id=31): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 48.797134902s ago: executing program 3 (id=35): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x7151}], 0x1) splice(r5, 0x0, r7, 0x0, 0x7151, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "8e"}]}], {0x14}}, 0x70}}, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x22, {{0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @empty}}}, {{0xa, 0x0, 0x7, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 48.121032592s ago: executing program 4 (id=45): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x10f000, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getpgid(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000a00)={'bridge_slave_1\x00', 0x600}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="d2a700000000000000000000f5ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0xa606, 0x3, 0x0, 0x26104, r7, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) 47.927898229s ago: executing program 3 (id=47): lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1018c0a, &(0x7f0000000280)={[{@acl}, {@debug}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@resuid={'resuid', 0x3d, r0}}, {@resgid={'resgid', 0x3d, r1}}]}, 0x83, 0x5c0, &(0x7f00000003c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40000, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xff, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x220005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x2) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) 46.78521149s ago: executing program 3 (id=51): unshare(0x22020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff038}, {0x20, 0x22, 0x0, 0xb1}, {0x6, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = memfd_create(&(0x7f0000001b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa7\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x02\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\a\x00\x00\x00\x00\x00\x00\x007\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t1\x11\xb4\x84$&0\xdd\xdeH\xaf\x8a\xdaM\x9e\xfe\xf8\x91\x87\xb0\xe73\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xffN\x96m\xd8\x10f\x14\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x00\x00\x00\x00\x01\x00\x00\x00\xa3\x83\x8e-ko\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%Q\a\x00\x00\x00\x00\x00\x00\x00f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0j8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xdchCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xed\v|\xe2h\xea\x8f\x16S\xc2\xa5\xb9\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\x80I\xe4\xfd\'\xae\x906\xe0\xaa\xdbtWGH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1d\xee\x9c\x7f\xc2_\x1b\xb1;\xf4\x92z\x1a\x90\xf4\x03\xe7\xe9\xa9v\xed7\x95\xf3\n\x81~\xec\x1b\x9b\xf5\xc9\xaf\x8b\f\xa0@\xcd\x89{\f\xfc\\\xd8\x91\xd3KU\xf1\xbb3\x9f\xfe\x9crH\xf2P\xb6\\r\"P\xc4\xde)N\x7f\x80\x9e\xea\xac\xee\xaf\xa6\"\x06\x941\xe7tS\x93I\xc9!B]hk\x8e\x82\xdc\xc5:\rsa\r@\xdd}1\x93\xb5\x19\x87\xc9\xc3y\xaf\x02\x88\xd8G\xdd\xe4\xf7\xde\t \xfe, \xf6\x19\xf7\x9f\xcf\xda0\xdf\x97\xda\xb3.\xc3\rN\x98\xf6\x15\a\x04\xa0\xa29\x1f\xb9\xc8R\xd5N\xa1\xe4\xc2!\x97\xfbbU\xaeqP\x1d\x80\xa9d\xf6\xf96\x9c\xf81a\xddw\x9d\xe1]aO\xbb\xed\xde\xb3j\a1\x04\x00\x00\x00\x00\x00\x00\x1e\x02Ar\a\xe4\x94\xc2\xeb\xc1\xde\xaa{\x1a\xc4e\xe2\xba\x85\xe0\xf6d\x19{\xb2\xea\x06i\x87Y!\x88\x8c\xd9/VT\x8aonk.+\x99%\xd5\xc9\x14\xa9M>\xc5%gs\x94\x1b\x02\xe5QP\a\x81\x8f\x0f\x9d;\xb5\xed\x98\xc7\xd3\xa9Nb\xde\x8a\xdc\\\x90\xcf\x8bv\x9ep\x0e\xe8\xba#t\x9b\x16\xc35\xe2\xac\xebap\xb3x\xb5q!\x14\t\xede\xde\x87\xb9-\x01x\x87m\x17\xf9\xa8=\x0e~`\n\x97\x93\xfaU\x00\x1f\x96\x1d\xbdJE\xbb`\xc7\xd6\xd6\xa8\x1eKS\xcd\x92;\x02\x00\x00\x00\x00\x00\x00\x00w\xce;E\xef,\xae\f\x9a\xec]\x14\x86\xb5\x8f\x1cx\xeccD\xb2\x95v\xa8\x0ftE\xd3\xa2\x1f\xf0\x84\x9aW~\x1a\x06J\xe5\r$\x91\x92 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) sendfile(r5, r3, 0x0, 0x578410e9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000002100)={{0x1, 0x1, 0x18, r2}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000c40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1000) 46.745603124s ago: executing program 4 (id=52): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f00000000c0)=0x1f) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r4) r5 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) execveat$binfmt(r5, r0, 0x0, 0x0, 0x100) unshare(0x2c020400) unshare(0x2040400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$assume_authority(0x10, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000"], 0x7c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000a0000000574eb343158000000070000007535435554249b86c100000030dea6e534799261819868874a108e2e55127e682af09648d820c39b4ea8709f5b55f80a836e2ee0bdcd07d225b6ee5741ca3d9211c69e1e8139cb8e660ca641ae844c486842bc09b0e7bd5e3351879e35b2c8826e76e6da80a1a3a2154dc51417b92700c9a17ab2972f", @ANYRES32, @ANYBLOB="00000000000000000039d7000000695ab364e1356245e0", @ANYRESOCT=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)="078c6e7ca76b6190e7028f12f86b1045fc16b92b40394c5f8244a074cb2346a0b84616d1739a00002e80a256023d357604e730108251eb205ee45d", &(0x7f0000000100), 0x3f, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r7}, 0x38) unshare(0x20000400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000896, &(0x7f0000000300)=ANY=[], 0x1, 0xa43, &(0x7f0000001380)="$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") 45.681479029s ago: executing program 3 (id=57): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x31, &(0x7f0000006680)=0x10) ioprio_set$pid(0x3, 0x0, 0x2000000) 45.631199333s ago: executing program 32 (id=57): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x31, &(0x7f0000006680)=0x10) ioprio_set$pid(0x3, 0x0, 0x2000000) 45.475215057s ago: executing program 4 (id=61): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x81062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) read$msr(r5, 0x0, 0x0) getdents(r5, &(0x7f0000002e40)=""/4110, 0x100e) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x7ffff000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x600, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f00000012c0), 0x4) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x4000000004, 0x4, 0x0, 0x0, 0x101a, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500640bd3fe3955800cad3d0099cebdc25f570659f6b222831aaf904ab1f010000000400", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675219601a8ca5b07dcc14180000000000c48bc054374615d900", [0xfffffffffffffce8, 0x4]}}) 44.866993281s ago: executing program 4 (id=62): lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1018c0a, &(0x7f0000000280)={[{@acl}, {@debug}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@resuid={'resuid', 0x3d, r0}}, {@resgid={'resgid', 0x3d, r1}}]}, 0x83, 0x5c0, &(0x7f00000003c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xc00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40000, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000380)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xff, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x220005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x2) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) 43.98075148s ago: executing program 4 (id=66): unshare(0x6020480) socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200402, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000380)) 43.148948934s ago: executing program 4 (id=72): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x33, @broadcast, 0x4e21, 0x2, 'wlc\x00', 0x2a, 0x8000, 0x3e}, 0x2c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 43.136556785s ago: executing program 33 (id=72): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x33, @broadcast, 0x4e21, 0x2, 'wlc\x00', 0x2a, 0x8000, 0x3e}, 0x2c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 38.843562057s ago: executing program 6 (id=136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000900000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x8001, 0x100) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x2, 0xec, "3f923300470bb96356f8dbcd11af857038475b70c6e688304bc3b4c15974363f53a4276795c037a236839368199c1ab7d95cdbc86c6e87cdf0b0e0907eb402760fca4e7e708b9689e75007ab48957b8542b790114c9dfa5a256bd6bc39a398ec3bd996f192e69a248656b721f519e9deda06203bbab0cda3488dd28748ad08e3f6e5ed4acf82c4a0175b8eabbd9b430671e5bda07c69e976d319c4c268401683c79d83e32e74545160c371f2cc22648307863bd88740c5a03f541c0ee8970df28febeb1920dba5432bc89abdd6b8d3b36c14ac7f6c3421145ba6a2deed73f4798de95f1290f4185bca4eead8"}) r4 = semget(0x1, 0x4, 0x69c) unshare(0xa000400) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) semop(r4, &(0x7f0000000040)=[{0x4, 0x400, 0x1000}, {0x1, 0xbbdd}, {0x0, 0x2}, {0x2, 0x1, 0x1800}], 0x4) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x10d4, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6, 0x3, "914a"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3729eb6ab62508a91e649705ff447bf736a7136ce6dd2816d6902df869aa1a64de6c"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "98a953a4e4039a307439aca5d67226d942549de965aa8ecd4d6c55da54b9c48a3a6a8454"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd, 0x3, "42ef5f99de7b44db9f"}]}]}, 0x10d4}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 38.679749361s ago: executing program 6 (id=138): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x80047453, 0x0) 38.672835332s ago: executing program 6 (id=140): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x2, 0x4, 0x4, 0x84a}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000007783200040000000100000000000000", @ANYRES32=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x8, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r11, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000280)={'dvmrp1\x00', &(0x7f0000000240)=@ethtool_ringparam={0x11, 0x8, 0xf, 0x10000, 0x5, 0x9, 0x6c7, 0x8000, 0xfffffffb}}) sendmsg$nl_route(r7, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@getnexthop={0x30, 0x6a, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008815}, 0x20040180) sendmsg$nl_route(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@bridge_newneigh={0x5c, 0x1c, 0x400, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r11, 0x0, 0x4f, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r11}, @NDA_FLAGS_EXT={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0x14}, @NDA_PROTOCOL={0x5, 0xc, 0x5}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_PROTOCOL={0x5, 0xc, 0x7f}, @NDA_VLAN={0x6}, @NDA_PORT={0x6, 0x6, 0x4e20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x2000c800) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'hsr0\x00'}}, 0x1e) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x0, 0x5, 0x7, 0x2, 0xbf66}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 38.153831798s ago: executing program 6 (id=144): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r3, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x40000004, 0x0) pidfd_getfd(r3, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000"]}, 0x108) lseek(r5, 0x8, 0x2) dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xaeda}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x250}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}]}, 0x50}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000000100)={0xee, 0x3}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$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") r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="5400000012000100040000000000020300000000000000000308000000000000380000000100000000000000000000000000000000000000033406ce449611f1361a1f65d819eadef15deee19de93699257c7ab025f26b9824d50a4f4c46917f5126d8a3240fbc711e822b7791280828f3d60f14b63b", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011000000"], 0x54}}, 0x200040c4) getresuid(&(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000580)=0x0) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000800, r9, &(0x7f00000005c0)={0xa, 0x170a, 0x0, 0x3, 0x0, 0x64731362, 0x1, 0xfffffffffffffff9, 0x2}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0xbb9, 0x4, 0x0) 37.7984038s ago: executing program 6 (id=151): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x2, 0x1, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_io_uring_setup(0xf9a, &(0x7f0000000140)={0x0, 0x5064, 0x4000, 0x0, 0x53}, &(0x7f0000000200), &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 37.324224352s ago: executing program 6 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x30, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 37.279902546s ago: executing program 34 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18349ff0707314657eaa8c2904dd1d1d86dd", 0x30, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xff}, 0x14) 28.092083283s ago: executing program 7 (id=289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) 27.982023262s ago: executing program 7 (id=293): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="5b4af57cd7b1bbe3a168afdd3c53f0dcc20000030806000108002e6cb5a8118c8c28aabbac1414aaaaaaaaaaaabbac1414bb"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@enum={0x8}, @func={0x8, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x840, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0xfffc, 0x6, 0xffffffffffffffff, 0x6, 0x7, 0x9, 0x651, 0xc, 0x8000009657, 0xffeffffffffffffd, 0x62db, 0x9a3f, 0x10, 0xb, 0x80000000000000, 0xcbd, 0x6, 0x1, 0x94d8, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d02, 0x3, 0x9}) 27.736456034s ago: executing program 7 (id=297): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 27.664318471s ago: executing program 7 (id=300): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x462, &(0x7f0000000300)="$eJzs3M9vFFUcAPDvTH/wm1bEHyBqE2Jo/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOI/4cWoJxOvejckRLmAnmpmdga2y27bhe1u7X4+ycB7O69977tv3sybebsNoGeNZP8kETsj4veIGKpmlxcYqf5368al6X9uXJpOYmnp7b+SvNzNG5emy6Llz+0oMqNpRPppUlSy3PyFi2emKpXZ80V+fOHs++PzFy4+d/rs1KnZU7PnJo8dO3pk4sUXJp9vS5xZXDf3fzR3YN/r7159Y/rE1fd+/j5r785if20c7TKSBf73Uq5+31PtrqzLdtWkk/4uNoSW9EVE1l0D+fgfir6403lD8donXW0csK6ya9OW5rsXl4BNLIlutwDojvJCn93/lluHph4bwvWXqzdAWdy3iq26pz/SosxA3f1tO41ExInFf7/Jtlin5xAAALU+n/76eDzbaP6XxsM15XYXayjDEfFAROyJiAcjYm9EPBSRl30kIh5tsf76paG75z/ptXsKbI2y+d9LxdrW8vlfOfuL4b4ityuPfyA5eboye7h4T0ZjYEuWn1ihjh9e/e2LZvtq53/ZltVfzgWLdlzrr3tANzO1MJVPStvg+scR+/sbxZ/cXglIImJfROxv7VfvLhOnn/7uQLNCq8e/gjasMy19G3Go2v+LURd/KVl5fXJ8a1RmD4+XR8Xdfvn1ylvN6r+v+Nsg6//ty4//+iLDSe167XzrdVz547Om9zT3evwPJu/k56Oyoz6cWlg4PxExmBzPXxwsyuavT9752TJfls/iHz3YePzviTsVPBYR2UH8eEQ8ERFPFm0vj5KDK8T/0yvN922E/p9peP67ffzX9X/rib4zP8bWJvWvrf+P5qnR4pX8/LeKtTbwvt48AAAA+J9I88/AJ+nY7XSajo1VP8O/N7anlbn5hWdOzn1wbqb6WfnhGEjLJ11DNc9DJ5LF4jdW85PFs+Jy/5HiufFXfdvy/Nj0XGWmy7FDr9vRZPxn/uzrduuAdddoHW1ysAsNATqufvyny7OX3+xkY4CO8n1t6F2rjP+0U+0AOq+/SRrY/BqN+ct1eWsBsDm55kPvMv6hdxn/0LuMf+hJ9/O9/l5KlH8kdaO0Z70T24rjo3mZSDdIU1tJlFe6jdKe9icOfblax60x0a0zEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv9FwAA//+wQOe1") ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000000c0)) 27.22367946s ago: executing program 7 (id=303): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x2, 0x1, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7d9, &(0x7f0000000040)={0x0, 0xc8dd, 0x40, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.899543239s ago: executing program 7 (id=310): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x80000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x4000010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x652c, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 12.498766669s ago: executing program 35 (id=310): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x80000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, 0x0}}], 0x1, 0x4000010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x652c, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 9.595706977s ago: executing program 5 (id=472): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x7ffb, 0x582, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8000000000000008, 0x1, 0x1, 0x8, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x65b9, 0x4) write(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x1, 0x0, 0x0, 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) io_uring_enter(r4, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) flock(r2, 0xf) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @mcast1, 0x3}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 9.330229611s ago: executing program 5 (id=475): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000d00)={&(0x7f0000000500)={0xa, 0x4e21, 0x9, @mcast2, 0x8}, 0x1b, 0x0, 0x0, &(0x7f0000000980)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x30}, 0x0) 9.262626517s ago: executing program 5 (id=477): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "de"}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 9.212480761s ago: executing program 5 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x2c, r1, 0x111, 0x70bd2d, 0x25dfdbf9, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c4}, 0x40850) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0xa, 0x4e21, 0x9, @mcast2, 0x8}, 0x1b, 0x0, 0x0, &(0x7f0000000980)=[@hopopts={{0x18, 0x29, 0x36, {0x2f}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x30}, 0x0) 7.235354527s ago: executing program 5 (id=496): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f523634457ffb3baf7aea4fb76dcfde6f11ed2c41d078b9cf1fc8f725661f37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4d97da2213f9d5c3c27df0355808390666e827d61dcc3a633bb0adc1a1b64b99fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c5d1471d8d2a58f5edaccfa15096c708329d97afc3612e325c1eb4a3ab2e156a974448000000000000c99200", "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"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'wlan0\x00', @remote}) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000040)={0x1, 0xfe, {0x2c, 0x1f, 0x16, 0x19, 0x0, 0x7ffc}}) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x7, 0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockopt(r0, 0x804, 0x2710, &(0x7f0000000580)=""/102383, &(0x7f0000000400)=0x18fef) 6.847840471s ago: executing program 5 (id=498): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2600, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12000b", 0x28, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000003c0), 0x10) 2.668258853s ago: executing program 1 (id=538): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() getrlimit(0xd, &(0x7f0000000040)) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x1, &(0x7f0000000180)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="670bd28fc701fad389481407efdfe211b8842f04dad67ac38a0fe9ee5f788b58982f91ab5b64cd0840338a60707cc408ec99dfcac680000000"], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000ff076800010003001000fdfffc7f00000000000000000c000200010000001400000004000c800800010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24040000) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x8) 1.941942617s ago: executing program 8 (id=548): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc510}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x6, 0x6, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc510}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x6, 0x6, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) 1.847560476s ago: executing program 8 (id=549): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x80000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = epoll_create1(0x80000) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) syz_io_uring_submit(0x0, r1, 0x0) setitimer(0x2, 0x0, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r4, 0x84, 0x9, &(0x7f0000000440)=""/170, &(0x7f0000003a80)=0xaa) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x5ee, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0xd80) sendfile(r5, r6, 0x0, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x8}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20044042) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.847188746s ago: executing program 1 (id=550): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x80047453, 0x0) 1.779771722s ago: executing program 1 (id=551): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.509452476s ago: executing program 8 (id=553): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x32, @local, 0x4e21, 0x2, 'wrr\x00', 0x20, 0x3, 0x4b}, {@remote, 0x4e23, 0x0, 0xbb9, 0x9, 0x8}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)='P', &(0x7f0000000740), 0x800000, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r5}, 0x38) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4006) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r7, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, 0x0, 0x78) 1.320349162s ago: executing program 8 (id=557): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000540)='io.pressure\x00', 0x2, 0x0) splice(r0, &(0x7f0000000500)=0x3, r1, &(0x7f0000000580)=0x539, 0xa197, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x3, 0xf3, 0x6, 0x3}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 983.434453ms ago: executing program 0 (id=559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket(0xa, 0x3, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x4000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000f40)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="020500030c0000002cbd7040fcdbdf2502000900080000001c00000000000000030006006c00000002004e22ac1414bb000000000000000002000100000000000000090c00000080030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3c, 0x1, 0x0, 0xd, 0x0, 0x0, 0x581c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x888, 0x3, 0xffef, 0x4, 0x5, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(r6) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x427, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0xfffdffff, @private1={0xfc, 0x1, '\x00', 0x9}, 0x4001000}}}, 0x108) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x57, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm}]}, 0xfffffffffffffdd4}}, 0x4044004) 862.627843ms ago: executing program 0 (id=562): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) socket$inet_tcp(0x2, 0x1, 0x0) setresuid(0xee01, 0xee00, 0x0) unshare(0x6020480) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000600)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 801.895659ms ago: executing program 0 (id=563): getpgrp(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000200)=0x20001, 0x5f) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e1f, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 801.479559ms ago: executing program 2 (id=564): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0', [], 0xa, "de"}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 801.124829ms ago: executing program 0 (id=565): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000e40), &(0x7f0000000100)=@udp, 0x8}, 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4}, {0x7, 0x1ff}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e]}}, &(0x7f0000000340)=""/2, 0x3b, 0x2, 0x1, 0x47}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140), 0x1003, r5}, 0x38) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f0000000380)=""/193) 797.154369ms ago: executing program 1 (id=566): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x100, 0x80000000004}, 0xa822, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140)=ANY=[], 0x4) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000500)={'team_slave_0\x00', {0x2, 0x4e24, @empty}}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x100, 0x80000000004}, 0xa822, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000140)=ANY=[], 0x4) (async) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000500)={'team_slave_0\x00', {0x2, 0x4e24, @empty}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 793.05447ms ago: executing program 8 (id=567): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x32, @local, 0x4e21, 0x2, 'wrr\x00', 0x20, 0x3, 0x4b}, {@remote, 0x4e23, 0x0, 0xbb9, 0x9, 0x8}}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)='P', &(0x7f0000000740), 0x800000, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r5}, 0x38) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4006) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r6, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xa28}, 0x8) 627.061354ms ago: executing program 2 (id=568): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa302"], 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) dup2(r2, r3) (async) r4 = dup2(r2, r3) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x8dd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0x40b, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x2) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r8, &(0x7f0000000200)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 586.032098ms ago: executing program 0 (id=569): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c00018006000600894f"], 0x24}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f14, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000200)={r1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x60, 0x2004, @fd, 0x80000, 0x0, 0x0, 0x4ed238995052bb62, 0x0, {0x2, r6}}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) unshare(0x600) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) r10 = dup3(r9, r8, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0xd, 0x0, "561451ba0b6a0b01a2e1792d932c4eea86bc3180e3ba362a2b9e2a86652491cc716bcc126134fdce39767ebe7effbe759406185a0cbb1d1ab7e89387665f795b75b16eff60c1a31f091257a100aa5229"}, 0xd8) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r12, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r12, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0xffffa3c1, 0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ef}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x616}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 519.627044ms ago: executing program 1 (id=570): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents64(r0, 0x0, 0x59) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0x5411, 0x1000000000000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0xe, 0x1}, 0xb, 0x0, &(0x7f00000001c0)="001d94d5d83e7237cb2b10f5983d9a2681ce30bdf5054da029ec3c790d1a6f5a97cd05e86dcc555790b1e87ab3894b7bda53a89eb3819cc4f6a642fa851b27e8348b5d2a753fb4fabd671417128986d9a3a3ab216c6cd63393daf9b00a1b8854a6585ca80150a7c0dfbc2f3226393dcd14e21f32401428ed8f53df809a028054efc89570ff21e70ff2e0b5140c21ca3dd93af6a43ce57854bf8958ca614ba391dc185e879dbf9dc21a05678a93ef7c23420653d1fc052bfe8f6292c4039e7c4dea2007d5715ba0609228ecbe6f0d0dc7eb28a1f2a21c0fd18905", 0xda, 0x1, 0x9, 0x8, 0xffffb8fd, 0x4, &(0x7f00000002c0)="168b75c3732f8da0095cd2d536ba641b0297338624feebde5373f94a81ffd4787d9c355fe5134f46eecd042e98745da8633c1ff9f04c43eb3cd7a4f3a9fd492eea6eebb1e9661175b0fafa1625dce93bc41ca0bfd8c31952206a59b2214a4d2c00258f19"}) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000000)="4e7a4781c6d0db4d8735823d05193312b31e66ee9d52565adbec82d33608c6d80ae47b190c2f230d75f912ac10cbfc5c3bc5d645129525c6336780bbdade9d9ebced146e8006af2235bb1da0278ba4c510fb252b72584583787b4b192e8ae13433ee5b532ecc93fdec88f65db7480bbcc1d7ebc5c5988925197c0dc0d0112797249a379ee231cd6b66211a2b82859956c9356d03", 0x94) 501.973445ms ago: executing program 8 (id=571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40a000, 0x0) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xfffe}}, 0x14) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg(r3, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 405.608124ms ago: executing program 1 (id=572): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) futex_waitv(&(0x7f0000005a00)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20c200a2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) r3 = syz_io_uring_setup(0x17aa, &(0x7f0000000080)={0x0, 0x374e, 0x0, 0x2, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2}, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1f, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x22ce, 0x1d, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000000)=0x7fff, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000000701020000000000000000000000070900010073797a3100000000090001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x5, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000000), 0x0) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r6) 275.629526ms ago: executing program 2 (id=573): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xf2, 0x0, 0xfffff02c}, {0x6, 0xff}]}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB="e2f0800e794ff01aa250ac894eb86eb3fb6b9561af2242f9a65b4c924d643e028148dc037ff48317b20addf018f78e92c1f145ebed1aaf948655ef8497222fce7ffe86d0670ad650805cd92017acd69f37b55ee9aab7d05f6cf8271ad9f04de86bafd0f5163505f0ae0dd1c508b1526e50c85dbc9eb591e1f1ef41551a2781b834b90c7ee7c7d1dd7153b6618e1a15f9dc793f2a047682e936ac960d11fff89814d070fe79679492d480883b5a3bb96239e127846a13a2"], 0x48) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {0x5, 0x8}, {0xb, 0x1}}}, 0x24}}, 0x20040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a9addff947abbc5f54d61ab6ebb09b9a46807d08fbe96b8b9c71dba17f55e77c2d02a980fe99471aeb3f69c3383d67a691c0a877587f3e5df75b029b7ed5e4e5e2be09dac0aede7c94ad62c1938c00"], 0xe8}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 205.804822ms ago: executing program 0 (id=574): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x2, @scatter={0x0, 0x300, 0x0}, &(0x7f0000000000)="080000000001", 0x0, 0x7, 0x0, 0x0, 0x0}) 94.517701ms ago: executing program 2 (id=575): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x80047453, 0x0) 742.6µs ago: executing program 2 (id=576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000580)="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", 0x0, 0xfe, 0x60000000, 0x14b, 0x0, &(0x7f0000000800)="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"}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000010c500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000009000000b7030000010000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xff5, &(0x7f0000001cc0)=""/4085, 0x41100, 0x7c}, 0x94) 0s ago: executing program 2 (id=577): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) kernel console output (not intermixed with test programs): 239628][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.259933][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.270230][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.277295][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.291941][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.298985][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.322367][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.366809][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.378140][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.397999][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.411994][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.502616][ T3312] veth0_vlan: entered promiscuous mode [ 32.541252][ T3312] veth1_vlan: entered promiscuous mode [ 32.570033][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.595349][ T3313] veth0_vlan: entered promiscuous mode [ 32.607167][ T3311] veth0_vlan: entered promiscuous mode [ 32.621140][ T3312] veth0_macvtap: entered promiscuous mode [ 32.628358][ T3313] veth1_vlan: entered promiscuous mode [ 32.635773][ T3311] veth1_vlan: entered promiscuous mode [ 32.643812][ T3312] veth1_macvtap: entered promiscuous mode [ 32.676865][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.687929][ T3313] veth0_macvtap: entered promiscuous mode [ 32.701636][ T3313] veth1_macvtap: entered promiscuous mode [ 32.707895][ T3318] veth0_vlan: entered promiscuous mode [ 32.715381][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.728315][ T3311] veth0_macvtap: entered promiscuous mode [ 32.748181][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.756699][ T3318] veth1_vlan: entered promiscuous mode [ 32.771655][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.780478][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.790379][ T3311] veth1_macvtap: entered promiscuous mode [ 32.800152][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.807979][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.817065][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.836252][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.845208][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.861726][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.870773][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.880562][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.897103][ T3317] veth0_vlan: entered promiscuous mode [ 32.907633][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.916958][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.927893][ T3318] veth0_macvtap: entered promiscuous mode [ 32.935473][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.950944][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.960722][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.970639][ T3318] veth1_macvtap: entered promiscuous mode [ 32.977005][ T3317] veth1_vlan: entered promiscuous mode [ 32.995884][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.016429][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.048751][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.049952][ T3483] loop3: detected capacity change from 0 to 128 [ 33.062267][ T3317] veth0_macvtap: entered promiscuous mode [ 33.063805][ T3317] veth1_macvtap: entered promiscuous mode [ 33.117252][ T1424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.138884][ T1424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.153822][ T3489] syz.3.6: attempt to access beyond end of device [ 33.153822][ T3489] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 33.169967][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.182313][ T3489] syz.3.6: attempt to access beyond end of device [ 33.182313][ T3489] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 33.197683][ T3489] syz.3.6: attempt to access beyond end of device [ 33.197683][ T3489] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 33.207823][ T1424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.219782][ T3489] syz.3.6: attempt to access beyond end of device [ 33.219782][ T3489] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 33.233181][ T1424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.249885][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.269391][ T3489] syz.3.6: attempt to access beyond end of device [ 33.269391][ T3489] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 33.283687][ T3489] syz.3.6: attempt to access beyond end of device [ 33.283687][ T3489] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 33.297043][ T3489] syz.3.6: attempt to access beyond end of device [ 33.297043][ T3489] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 33.339069][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 33.339086][ T28] audit: type=1400 audit(1771495242.359:113): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.369552][ T3489] syz.3.6: attempt to access beyond end of device [ 33.369552][ T3489] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 33.417420][ T3489] syz.3.6: attempt to access beyond end of device [ 33.417420][ T3489] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 33.449805][ T28] audit: type=1400 audit(1771495242.459:114): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.530836][ T3489] syz.3.6: attempt to access beyond end of device [ 33.530836][ T3489] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 33.551271][ T28] audit: type=1400 audit(1771495242.459:115): avc: denied { open } for pid=3318 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.602026][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.622812][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.638489][ T28] audit: type=1400 audit(1771495242.459:116): avc: denied { ioctl } for pid=3318 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.702318][ T28] audit: type=1400 audit(1771495242.699:117): avc: denied { create } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 33.731901][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.741274][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.760606][ T28] audit: type=1400 audit(1771495242.699:118): avc: denied { ioctl } for pid=3482 comm="syz.3.6" path="socket:[5222]" dev="sockfs" ino=5222 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 33.789189][ T28] audit: type=1400 audit(1771495242.699:119): avc: denied { create } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.864090][ T3490] loop2: detected capacity change from 0 to 32768 [ 33.899113][ T28] audit: type=1400 audit(1771495242.919:120): avc: denied { create } for pid=3501 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.959141][ T28] audit: type=1400 audit(1771495242.949:121): avc: denied { connect } for pid=3501 comm="syz.1.7" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.012186][ T28] audit: type=1400 audit(1771495242.949:122): avc: denied { setopt } for pid=3501 comm="syz.1.7" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.171547][ T3498] loop4: detected capacity change from 0 to 32768 [ 34.202887][ T3504] xt_hashlimit: size too large, truncated to 1048576 [ 34.354646][ T3305] loop2: p1 p2 p3 < p5 > [ 34.359208][ T3305] loop2: p1 size 242222080 extends beyond EOD, truncated [ 34.379639][ T3305] loop2: p2 start 16777215 is beyond EOD, truncated [ 34.400292][ T3299] loop4: p1 p2 p3 < p5 > [ 34.404768][ T3299] loop4: p1 size 242222080 extends beyond EOD, truncated [ 34.416044][ T3490] loop2: p1 p2 p3 < > [ 34.429241][ T3490] loop2: p1 size 242222080 extends beyond EOD, truncated [ 34.440013][ T3299] loop4: p2 start 16777215 is beyond EOD, truncated [ 34.467032][ T3490] loop2: p2 start 16777215 is beyond EOD, truncated [ 34.545289][ T3498] loop4: p1 p2 p3 < p5 > [ 34.586735][ T3498] loop4: p1 size 242222080 extends beyond EOD, truncated [ 34.595485][ T3498] loop4: p2 start 16777215 is beyond EOD, truncated [ 34.630957][ C1] hrtimer: interrupt took 46605 ns [ 34.837150][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 34.848332][ T3525] loop4: detected capacity change from 0 to 512 [ 34.856824][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.880828][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 34.933924][ T3525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.970043][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 34.982577][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 34.997357][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 35.021114][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.054251][ T3525] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.093809][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 35.105112][ T3532] udevd[3532]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 35.116228][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 35.120240][ T3525] EXT4-fs (loop4): 1 truncate cleaned up [ 35.157275][ T3525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.704800][ T3543] loop0: detected capacity change from 0 to 1024 [ 35.737044][ T3543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.820421][ T3546] mmap: syz.4.12 (3546) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.138047][ T3562] futex_wake_op: syz.3.18 tries to shift op by -1; fix this program [ 36.591432][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.785006][ T3570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.876705][ T3576] capability: warning: `syz.0.21' uses deprecated v2 capabilities in a way that may be insecure [ 37.053537][ T3579] loop0: detected capacity change from 0 to 512 [ 37.099644][ T3579] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.22: iget: bad extra_isize 90 (inode size 256) [ 37.129116][ T3579] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.129364][ T3579] EXT4-fs (loop0): Remounting filesystem read-only [ 37.145168][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 37.145190][ C0] EXT4-fs (loop0): initial error at time 1771495246: ext4_xattr_inode_iget:441: inode 11 [ 37.145225][ C0] EXT4-fs (loop0): last error at time 1771495246: ext4_xattr_inode_iget:441: inode 11 [ 37.211176][ T3579] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.229950][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.242429][ T3579] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 37.253730][ T3579] EXT4-fs (loop0): 1 orphan inode deleted [ 37.279985][ T3579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.282665][ T3585] capability: warning: `syz.4.24' uses 32-bit capabilities (legacy support in use) [ 37.330449][ T3579] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.369109][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 38.369130][ T28] audit: type=1400 audit(1771495247.379:180): avc: denied { map } for pid=3605 comm="syz.4.30" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.432667][ T28] audit: type=1400 audit(1771495247.379:181): avc: denied { read write } for pid=3605 comm="syz.4.30" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.466734][ T3616] loop2: detected capacity change from 0 to 1024 [ 38.473728][ T3616] EXT4-fs: Ignoring removed bh option [ 38.489822][ T3616] ext4: Invalid gid '0x00000000ffffffff' [ 38.521804][ T28] audit: type=1400 audit(1771495247.539:182): avc: denied { read write } for pid=3607 comm="syz.3.31" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.576372][ T28] audit: type=1400 audit(1771495247.539:183): avc: denied { open } for pid=3607 comm="syz.3.31" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.606642][ T3616] loop2: detected capacity change from 0 to 512 [ 38.618192][ T3616] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 38.677193][ T28] audit: type=1400 audit(1771495247.599:184): avc: denied { write } for pid=3615 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.718306][ T3616] loop2: detected capacity change from 0 to 4096 [ 38.725128][ T28] audit: type=1400 audit(1771495247.629:185): avc: denied { write } for pid=3615 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.750374][ T28] audit: type=1400 audit(1771495247.689:186): avc: denied { connect } for pid=3615 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.795745][ T28] audit: type=1400 audit(1771495247.689:187): avc: denied { name_connect } for pid=3615 comm="syz.2.32" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.848889][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.942003][ T3616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.057440][ T28] audit: type=1400 audit(1771495248.069:188): avc: denied { read write } for pid=3624 comm="syz.3.35" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.081682][ T28] audit: type=1400 audit(1771495248.079:189): avc: denied { open } for pid=3624 comm="syz.3.35" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 39.562792][ T3645] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 39.585540][ T3645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=3645 comm=syz.4.42 [ 39.662104][ T3647] loop2: detected capacity change from 0 to 1024 [ 39.676647][ T3647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.686994][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.43'. [ 39.694809][ T3647] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 39.715519][ T3647] System zones: 0-1, 3-36 [ 39.736457][ T3647] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.44: bad orphan inode 134217728 [ 39.747246][ T3647] loop2: lost filesystem error report for type 5 error -117 [ 39.747912][ T3647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.860228][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.942705][ T3658] loop3: detected capacity change from 0 to 1024 [ 39.980010][ T3658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c018, mo2=0002] [ 39.988314][ T3658] System zones: 0-1, 3-8 [ 39.993228][ T3658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.007898][ T3658] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.020960][ T3658] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.47: corrupted xattr block 128: invalid header [ 40.034697][ T3658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 40.044043][ T3658] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.47: corrupted xattr block 128: invalid header [ 40.057693][ T3658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 40.075984][ T3658] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.47: corrupted xattr block 128: invalid header [ 40.076658][ T3663] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.47: corrupted xattr block 128: invalid header [ 40.091100][ T3658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 40.155397][ T3663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 40.289396][ T3663] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.47: corrupted xattr block 128: invalid header [ 40.492619][ T3663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 40.969390][ T3312] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /9/file1: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=61712, size=1024 fake=0 [ 41.044697][ T3653] syz.4.45 (3653) used greatest stack depth: 10248 bytes left [ 41.119781][ T3312] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /9/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 41.215163][ T3312] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 41.235782][ T3312] EXT4-fs error (device loop3): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /9/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 41.326783][ T3679] loop1: detected capacity change from 0 to 1024 [ 41.334221][ T3679] ======================================================= [ 41.334221][ T3679] WARNING: The mand mount option has been deprecated and [ 41.334221][ T3679] and is ignored by this kernel. Remove the mand [ 41.334221][ T3679] option from the mount to silence this warning. [ 41.334221][ T3679] ======================================================= [ 41.392286][ T3679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.470245][ T3312] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 41.578392][ T3675] process 'syz.4.52' launched '/dev/sg#' with NULL argv: empty string added [ 41.668542][ T3675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.52'. [ 41.744640][ T3675] netlink: 64 bytes leftover after parsing attributes in process `syz.4.52'. [ 41.789371][ T3675] loop4: detected capacity change from 0 to 1764 [ 41.796284][ T3675] iso9660: Unknown parameter 'Œn|§kaçøkEü¹+@9L_‚D tË#F ¸FÑsš' [ 42.007190][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.062078][ T3691] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3691 comm=syz.2.56 [ 42.081247][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.092136][ T3691] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 42.113809][ T1424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.181321][ T1424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.251761][ T1424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.331961][ T1424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.435592][ T3709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.60'. [ 42.744029][ T1424] bridge_slave_1: left allmulticast mode [ 42.809697][ T1424] bridge_slave_1: left promiscuous mode [ 42.864594][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.938954][ T1424] bridge_slave_0: left allmulticast mode [ 42.961642][ T3716] loop4: detected capacity change from 0 to 1024 [ 42.970546][ T1424] bridge_slave_0: left promiscuous mode [ 42.976354][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.010405][ T3716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c018, mo2=0002] [ 43.057494][ T3716] System zones: 0-1, 3-8 [ 43.069790][ T3716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.124675][ T3716] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.189750][ T3716] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.62: corrupted xattr block 128: invalid header [ 43.238889][ T3716] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 43.274357][ T3720] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.62: corrupted xattr block 128: invalid header [ 43.314205][ T3716] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.62: corrupted xattr block 128: invalid header [ 43.352179][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.372588][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.394062][ T3716] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 43.414248][ T1424] bond0 (unregistering): Released all slaves [ 43.423777][ T3723] loop1: detected capacity change from 0 to 1024 [ 43.424271][ T3716] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.62: corrupted xattr block 128: invalid header [ 43.439075][ T3720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 43.452663][ T3716] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 43.452992][ T3723] EXT4-fs: Ignoring removed orlov option [ 43.499076][ T3720] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.62: corrupted xattr block 128: invalid header [ 43.531851][ T3720] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 43.549088][ T1424] hsr_slave_0: left promiscuous mode [ 43.560937][ T3729] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 43.577102][ T3723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.589669][ T3516] IPVS: starting estimator thread 0... [ 43.595231][ T1424] hsr_slave_1: left promiscuous mode [ 43.615785][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.635766][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.689077][ T3731] IPVS: using max 2016 ests per chain, 100800 per kthread [ 43.719475][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 43.719528][ T28] audit: type=1400 audit(1771495252.749:223): avc: denied { map } for pid=3727 comm="syz.2.64" path="socket:[5719]" dev="sockfs" ino=5719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.748716][ T28] audit: type=1400 audit(1771495252.749:224): avc: denied { read } for pid=3727 comm="syz.2.64" path="socket:[5719]" dev="sockfs" ino=5719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.749164][ T1424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.832927][ T3318] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /12/file1: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=61712, size=1024 fake=0 [ 43.849160][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.873839][ T1424] veth1_macvtap: left promiscuous mode [ 43.882544][ T1424] veth0_macvtap: left promiscuous mode [ 43.889578][ T3318] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /12/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 43.892460][ T1424] veth1_vlan: left promiscuous mode [ 43.930821][ T3318] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 43.959486][ T1424] veth0_vlan: left promiscuous mode [ 43.974059][ T3318] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /12/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 44.006980][ T28] audit: type=1107 audit(1771495253.029:225): pid=3745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 44.031000][ T3318] EXT4-fs error (device loop4): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 44.137334][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 44.162206][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 44.439741][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.545161][ T3762] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.71'. [ 44.571081][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.581508][ T28] audit: type=1400 audit(1771495253.609:226): avc: denied { shutdown } for pid=3761 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.631470][ T3698] chnl_net:caif_netlink_parms(): no params data found [ 44.650431][ T28] audit: type=1400 audit(1771495253.629:227): avc: denied { getopt } for pid=3761 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.746804][ T3779] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 44.747600][ T28] audit: type=1400 audit(1771495253.629:228): avc: denied { write } for pid=3761 comm="syz.1.71" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.792157][ T3779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.803527][ T3783] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 44.822180][ T3784] loop2: detected capacity change from 0 to 512 [ 44.839071][ T28] audit: type=1400 audit(1771495253.629:229): avc: denied { ioctl } for pid=3761 comm="syz.1.71" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.888459][ T3783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 44.905874][ T28] audit: type=1400 audit(1771495253.729:230): avc: denied { ioctl } for pid=3761 comm="syz.1.71" path="socket:[5778]" dev="sockfs" ino=5778 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.930470][ T28] audit: type=1400 audit(1771495253.749:231): avc: denied { create } for pid=3775 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.960348][ T28] audit: type=1400 audit(1771495253.829:232): avc: denied { mac_admin } for pid=3781 comm="syz.1.76" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.981102][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.988750][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.001076][ T3698] bridge_slave_0: entered allmulticast mode [ 45.007556][ T3698] bridge_slave_0: entered promiscuous mode [ 45.021968][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.029524][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.036667][ T3698] bridge_slave_1: entered allmulticast mode [ 45.045231][ T3698] bridge_slave_1: entered promiscuous mode [ 45.045972][ T3784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.062835][ T3698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.074388][ T3698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.095489][ T3784] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.104581][ T3698] team0: Port device team_slave_0 added [ 45.112879][ T3698] team0: Port device team_slave_1 added [ 45.143093][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.157740][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.185685][ T3698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.329318][ T3698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.337609][ T3698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.364180][ T3698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.376568][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.418155][ T3698] hsr_slave_0: entered promiscuous mode [ 45.424470][ T3827] xt_hashlimit: size too large, truncated to 1048576 [ 45.431735][ T3698] hsr_slave_1: entered promiscuous mode [ 45.437372][ T3827] xt_hashlimit: max too large, truncated to 1048576 [ 45.610480][ T3786] chnl_net:caif_netlink_parms(): no params data found [ 45.700950][ T3698] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.749697][ T3698] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.775051][ T3698] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.799976][ T3786] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.807194][ T3786] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.819198][ T3786] bridge_slave_0: entered allmulticast mode [ 45.825792][ T3786] bridge_slave_0: entered promiscuous mode [ 45.837707][ T3698] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.862911][ T3875] Zero length message leads to an empty skb [ 45.888666][ T3877] loop0: detected capacity change from 0 to 4096 [ 45.895610][ T3786] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.907456][ T3786] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.916186][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.917714][ T3786] bridge_slave_1: entered allmulticast mode [ 45.955490][ T3786] bridge_slave_1: entered promiscuous mode [ 45.972027][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.984044][ T3786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.027002][ T3875] syzkaller0: entered promiscuous mode [ 46.042811][ T3875] syzkaller0: entered allmulticast mode [ 46.065203][ T3786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.104145][ T3786] team0: Port device team_slave_0 added [ 46.120303][ T3786] team0: Port device team_slave_1 added [ 46.156796][ T3698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.184338][ T3786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.192163][ T3786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.218652][ T3786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.233008][ T3786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.241141][ T3786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.267708][ T3786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.301824][ T3698] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.322515][ T3899] atomic_op ffff88811e85a528 conn xmit_atomic 0000000000000000 [ 46.342579][ T3786] hsr_slave_0: entered promiscuous mode [ 46.348618][ T3786] hsr_slave_1: entered promiscuous mode [ 46.354480][ T3786] debugfs: 'hsr0' already exists in 'hsr' [ 46.360670][ T3786] Cannot create hsr debugfs directory [ 46.367290][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.374407][ T493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.384218][ T3901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.396952][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.404093][ T493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.427348][ T3698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.438085][ T3698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.602597][ T3917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 46.617143][ T3786] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 46.625593][ T3917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3917 comm=syz.2.100 [ 46.633074][ T3786] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 46.645120][ T3917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=3917 comm=syz.2.100 [ 46.660056][ T3786] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 46.678500][ T3698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.685903][ T3786] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 46.718906][ T3924] loop2: detected capacity change from 0 to 1024 [ 46.728165][ T3924] EXT4-fs: dax option not supported [ 46.731059][ T3919] syzkaller0: entered promiscuous mode [ 46.739179][ T3919] syzkaller0: entered allmulticast mode [ 46.862373][ T3939] loop2: detected capacity change from 0 to 4096 [ 46.866576][ T3786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.899289][ T3786] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.917917][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.942260][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.949411][ T1424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.996579][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.003760][ T1424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.011690][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.042642][ T3698] veth0_vlan: entered promiscuous mode [ 47.067850][ T3698] veth1_vlan: entered promiscuous mode [ 47.099529][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 47.107675][ T3698] veth0_macvtap: entered promiscuous mode [ 47.133737][ T3698] veth1_macvtap: entered promiscuous mode [ 47.146316][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.166893][ T3698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.172838][ T3965] netlink: 32 bytes leftover after parsing attributes in process `syz.2.108'. [ 47.182307][ T3786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.194898][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.218392][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.235900][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.259301][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.340734][ T3975] syzkaller0: entered promiscuous mode [ 47.346384][ T3975] syzkaller0: entered allmulticast mode [ 47.524496][ T3988] syzkaller0: entered promiscuous mode [ 47.541565][ T3988] syzkaller0: entered allmulticast mode [ 47.726168][ T3786] veth0_vlan: entered promiscuous mode [ 47.741325][ T3786] veth1_vlan: entered promiscuous mode [ 47.764667][ T3786] veth0_macvtap: entered promiscuous mode [ 47.785683][ T3786] veth1_macvtap: entered promiscuous mode [ 47.798829][ T3786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.811768][ T3786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.834302][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.856252][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.881289][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.899873][ T4002] loop1: detected capacity change from 0 to 512 [ 47.911285][ T1424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.936722][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.028919][ T4002] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.242966][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.276148][ T4012] netlink: 28 bytes leftover after parsing attributes in process `syz.6.119'. [ 48.288422][ T4012] netlink: 28 bytes leftover after parsing attributes in process `syz.6.119'. [ 48.300551][ T4012] syzkaller0: entered promiscuous mode [ 48.306076][ T4012] syzkaller0: entered allmulticast mode [ 48.314144][ T4012] vhci_hcd vhci_hcd.0: default hub control req: 0406 v00ad i0001 l0 [ 48.370598][ T4016] syz.2.121 uses obsolete (PF_INET,SOCK_PACKET) [ 48.405475][ T4016] loop2: detected capacity change from 0 to 1024 [ 48.428502][ T4016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.446037][ T4016] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 48.454323][ T4016] System zones: 0-1, 3-36 [ 48.474479][ T4022] syzkaller0: entered promiscuous mode [ 48.480737][ T4022] syzkaller0: entered allmulticast mode [ 48.480814][ T4016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.584604][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 48.602515][ T4030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.613692][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.628233][ T4030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.759707][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 48.759722][ T28] audit: type=1400 audit(1771495257.789:350): avc: denied { ioctl } for pid=4045 comm="syz.0.132" path="socket:[7003]" dev="sockfs" ino=7003 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.857304][ T4050] syzkaller0: entered promiscuous mode [ 48.879273][ T4050] syzkaller0: entered allmulticast mode [ 48.918286][ T28] audit: type=1400 audit(1771495257.939:351): avc: denied { getopt } for pid=4045 comm="syz.0.132" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.288322][ T4072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.140'. [ 49.709493][ T4080] loop6: detected capacity change from 0 to 128 [ 49.735201][ T4080] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 49.878749][ T4080] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 49.887775][ T4080] FAT-fs (loop6): Filesystem has been set read-only [ 49.897344][ T4080] bio_check_eod: 39 callbacks suppressed [ 49.897525][ T4080] syz.6.144: attempt to access beyond end of device [ 49.897525][ T4080] loop6: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 49.928793][ T4080] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 49.938745][ T4080] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 49.953996][ T4080] syz.6.144 (4080) used greatest stack depth: 9736 bytes left [ 49.990567][ T4092] loop2: detected capacity change from 0 to 512 [ 49.999883][ T4092] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.025350][ T4092] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.149: corrupted xattr entries [ 50.049277][ T4092] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.049553][ T4092] EXT4-fs (loop2): 1 orphan inode deleted [ 50.064569][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.064591][ C1] EXT4-fs (loop2): initial error at time 1771495259: xattr_find_entry:337: inode 15 [ 50.064625][ C1] EXT4-fs (loop2): last error at time 1771495259: xattr_find_entry:337: inode 15 [ 50.097307][ T4092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.110872][ T4092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.149'. [ 50.120842][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 50.154244][ T4098] bond1: option ad_select: invalid value (4) [ 50.189545][ T4098] bond1 (unregistering): Released all slaves [ 50.223359][ T4106] loop1: detected capacity change from 0 to 128 [ 50.231797][ T4099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 50.241803][ T28] audit: type=1400 audit(1771495259.269:352): avc: denied { bind } for pid=4104 comm="syz.5.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.270334][ T4106] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.291901][ T4106] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.305468][ T28] audit: type=1400 audit(1771495259.329:353): avc: denied { rename } for pid=4105 comm="syz.1.154" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.327541][ T28] audit: type=1400 audit(1771495259.329:354): avc: denied { mount } for pid=4109 comm="syz.0.156" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.386679][ T28] audit: type=1400 audit(1771495259.409:355): avc: denied { create } for pid=4111 comm="syz.5.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.411221][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.419783][ T28] audit: type=1400 audit(1771495259.419:356): avc: denied { listen } for pid=4111 comm="syz.5.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.458565][ T28] audit: type=1400 audit(1771495259.479:357): avc: denied { write } for pid=4116 comm="syz.2.159" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.517812][ T70] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.583594][ T28] audit: type=1400 audit(1771495259.609:358): avc: denied { setopt } for pid=4119 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.638724][ T28] audit: type=1400 audit(1771495259.639:359): avc: denied { mount } for pid=4105 comm="syz.1.154" name="/" dev="configfs" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.758483][ T70] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.820438][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.842121][ T70] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.873200][ T4137] loop2: detected capacity change from 0 to 512 [ 50.933704][ T4137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.972072][ T70] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.977761][ T4137] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.024554][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.194592][ T4154] netlink: 136 bytes leftover after parsing attributes in process `syz.2.169'. [ 51.214011][ T4154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.233181][ T70] bridge_slave_1: left allmulticast mode [ 51.243706][ T70] bridge_slave_1: left promiscuous mode [ 51.263725][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.311985][ T70] bridge_slave_0: left allmulticast mode [ 51.320807][ T70] bridge_slave_0: left promiscuous mode [ 51.337820][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.371284][ T4172] syz.5.174 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.509670][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.511150][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.512415][ T70] bond0 (unregistering): Released all slaves [ 51.581241][ T70] hsr_slave_0: left promiscuous mode [ 51.581797][ T70] hsr_slave_1: left promiscuous mode [ 51.582206][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.582223][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.582690][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.582721][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.609210][ T70] veth1_macvtap: left promiscuous mode [ 51.609241][ T70] veth0_macvtap: left promiscuous mode [ 51.609329][ T70] veth1_vlan: left promiscuous mode [ 51.609384][ T70] veth0_vlan: left promiscuous mode [ 51.765085][ T70] team0 (unregistering): Port device team_slave_1 removed [ 51.787154][ T70] team0 (unregistering): Port device team_slave_0 removed [ 51.876399][ T4125] chnl_net:caif_netlink_parms(): no params data found [ 51.918212][ T4231] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.986558][ T4242] FAULT_INJECTION: forcing a failure. [ 51.986558][ T4242] name failslab, interval 1, probability 0, space 0, times 0 [ 51.999788][ T4242] CPU: 1 UID: 0 PID: 4242 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 51.999819][ T4242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.999876][ T4242] Call Trace: [ 51.999950][ T4242] [ 51.999959][ T4242] __dump_stack+0x1d/0x30 [ 51.999986][ T4242] dump_stack_lvl+0x95/0xd0 [ 52.000008][ T4242] dump_stack+0x15/0x1b [ 52.000028][ T4242] should_fail_ex+0x263/0x280 [ 52.000051][ T4242] should_failslab+0x8c/0xb0 [ 52.000118][ T4242] kmem_cache_alloc_noprof+0x66/0x400 [ 52.000154][ T4242] ? skb_clone+0x151/0x1f0 [ 52.000261][ T4242] skb_clone+0x151/0x1f0 [ 52.000289][ T4242] __netlink_deliver_tap+0x2c9/0x500 [ 52.000323][ T4242] netlink_unicast+0x66b/0x690 [ 52.000351][ T4242] netlink_sendmsg+0x5c8/0x6f0 [ 52.000500][ T4242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.000528][ T4242] ____sys_sendmsg+0x5af/0x600 [ 52.000558][ T4242] ___sys_sendmsg+0x195/0x1e0 [ 52.000597][ T4242] __x64_sys_sendmsg+0xd4/0x160 [ 52.000668][ T4242] x64_sys_call+0x194c/0x3020 [ 52.000697][ T4242] do_syscall_64+0x12c/0x370 [ 52.000808][ T4242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.000865][ T4242] RIP: 0033:0x7fab8b44c629 [ 52.000884][ T4242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.000903][ T4242] RSP: 002b:00007fab89e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.000924][ T4242] RAX: ffffffffffffffda RBX: 00007fab8b6c5fa0 RCX: 00007fab8b44c629 [ 52.000939][ T4242] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 52.000954][ T4242] RBP: 00007fab89e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.000993][ T4242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.001007][ T4242] R13: 00007fab8b6c6038 R14: 00007fab8b6c5fa0 R15: 00007ffc9adc7b58 [ 52.001028][ T4242] [ 52.248094][ T4125] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.255412][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.263503][ T4125] bridge_slave_0: entered allmulticast mode [ 52.270267][ T4125] bridge_slave_0: entered promiscuous mode [ 52.277062][ T4125] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.284213][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.291510][ T4125] bridge_slave_1: entered allmulticast mode [ 52.299605][ T4125] bridge_slave_1: entered promiscuous mode [ 52.323305][ T4125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.337072][ T4125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.359636][ T4125] team0: Port device team_slave_0 added [ 52.366537][ T4125] team0: Port device team_slave_1 added [ 52.383491][ T4125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.391671][ T4125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.426297][ T4125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.442847][ T4258] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.450893][ T4125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.458372][ T4258] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 52.467111][ T4125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.507405][ T4125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.555242][ T4125] hsr_slave_0: entered promiscuous mode [ 52.561700][ T4125] hsr_slave_1: entered promiscuous mode [ 52.567544][ T4125] debugfs: 'hsr0' already exists in 'hsr' [ 52.573678][ T4125] Cannot create hsr debugfs directory [ 52.600566][ T4269] hub 8-0:1.0: USB hub found [ 52.605327][ T4269] hub 8-0:1.0: 8 ports detected [ 52.648419][ T4272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.192'. [ 52.658089][ T4272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.192'. [ 52.782193][ T4288] loop0: detected capacity change from 0 to 512 [ 52.783195][ T4125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.800805][ T4288] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 52.832304][ T4288] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.840802][ T4125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.848103][ T4288] EXT4-fs error (device loop0): __ext4_iget:5378: inode #11: block 8: comm syz.0.193: invalid block [ 52.861129][ T4125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 52.870598][ T4291] loop5: detected capacity change from 0 to 512 [ 52.870756][ T4288] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.877098][ T4125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 52.878886][ T4291] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.886278][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 52.886297][ C0] EXT4-fs (loop0): initial error at time 1771495261: __ext4_iget:5378: inode 11: block 8 [ 52.886331][ C0] EXT4-fs (loop0): last error at time 1771495261: __ext4_iget:5378: inode 11: block 8 [ 52.892230][ T4288] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.193: couldn't read orphan inode 11 (err -117) [ 52.921440][ T4291] EXT4-fs (loop5): 1 truncate cleaned up [ 52.928987][ T4288] loop0: lost filesystem error report for type 5 error -117 [ 52.941068][ T4291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.949947][ T4288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.008455][ T4299] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 53.020213][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.023609][ T4291] netlink: 76 bytes leftover after parsing attributes in process `syz.5.195'. [ 53.080483][ T4125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.093855][ T4125] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.121659][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.128761][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.171688][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.178797][ T493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.276945][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 53.278791][ T4125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.328597][ T4125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.402494][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.402494][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.430032][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 53.447797][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.447797][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.490702][ T4125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.508283][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.508283][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.545457][ T4344] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.204'. [ 53.549731][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.549731][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.579556][ T4348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4348 comm=syz.0.203 [ 53.719842][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.719842][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.737430][ T4349] loop2: detected capacity change from 0 to 4096 [ 53.747331][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.747331][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.773369][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.773369][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.794940][ T3698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.813492][ T4125] veth0_vlan: entered promiscuous mode [ 53.821809][ T4125] veth1_vlan: entered promiscuous mode [ 53.829162][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.829162][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.851871][ T4349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.858553][ T4125] veth0_macvtap: entered promiscuous mode [ 53.876860][ T4125] veth1_macvtap: entered promiscuous mode [ 53.884571][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.884571][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.909708][ T4330] sg_write: data in/out 67174380/57 bytes for SCSI command 0x0-- guessing data in; [ 53.909708][ T4330] program syz.1.202 not setting count and/or reply_len properly [ 53.932558][ T4125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.946107][ T4125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.970346][ T3713] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.974855][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.997172][ T3713] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.008802][ T3713] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.017869][ T3713] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.167863][ T4379] netlink: 'syz.7.162': attribute type 10 has an invalid length. [ 54.188685][ T4379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.196761][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 54.196778][ T28] audit: type=1400 audit(1771495263.219:386): avc: denied { associate } for pid=4381 comm="syz.2.206" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.225517][ T4379] team0: Port device bond0 added [ 54.493905][ T28] audit: type=1400 audit(1771495263.519:387): avc: denied { create } for pid=4368 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.870320][ T28] audit: type=1400 audit(1771495263.899:388): avc: denied { setopt } for pid=4406 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.984244][ T28] audit: type=1400 audit(1771495264.009:389): avc: denied { create } for pid=4412 comm="syz.1.216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=irda_socket permissive=1 [ 55.163090][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.170328][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.183671][ T28] audit: type=1400 audit(1771495264.069:390): avc: denied { shutdown } for pid=4418 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.365923][ T4425] __nla_validate_parse: 3 callbacks suppressed [ 55.365973][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 55.387847][ T28] audit: type=1400 audit(1771495264.079:391): avc: denied { ioctl } for pid=4418 comm="syz.1.218" path="socket:[8992]" dev="sockfs" ino=8992 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.403885][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 55.435353][ T4425] netlink: 56 bytes leftover after parsing attributes in process `syz.1.219'. [ 55.453606][ T28] audit: type=1400 audit(1771495264.109:392): avc: denied { firmware_load } for pid=4416 comm="syz.5.217" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 55.455183][ T4426] netlink: 56 bytes leftover after parsing attributes in process `syz.1.219'. [ 55.535918][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.631389][ T4425] geneve2: entered promiscuous mode [ 55.636732][ T4425] geneve2: entered allmulticast mode [ 55.689979][ T4429] loop5: detected capacity change from 0 to 512 [ 55.708323][ T4431] FAULT_INJECTION: forcing a failure. [ 55.708323][ T4431] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.722913][ T4429] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.740382][ T4429] EXT4-fs: Ignoring removed nobh option [ 55.773200][ T4431] CPU: 0 UID: 0 PID: 4431 Comm: syz.1.221 Not tainted syzkaller #0 PREEMPT(full) [ 55.773232][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.773252][ T4431] Call Trace: [ 55.773259][ T4431] [ 55.773266][ T4431] __dump_stack+0x1d/0x30 [ 55.773295][ T4431] dump_stack_lvl+0x95/0xd0 [ 55.773354][ T4431] dump_stack+0x15/0x1b [ 55.773380][ T4431] should_fail_ex+0x263/0x280 [ 55.773404][ T4431] should_fail+0xb/0x20 [ 55.773422][ T4431] should_fail_usercopy+0x1a/0x20 [ 55.773449][ T4431] _copy_from_user+0x1c/0xb0 [ 55.773500][ T4431] bpf_test_init+0xb9/0x130 [ 55.773527][ T4431] bpf_prog_test_run_xdp+0x306/0xa10 [ 55.773560][ T4431] ? __rcu_read_unlock+0x4e/0x70 [ 55.773589][ T4431] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 55.773618][ T4431] bpf_prog_test_run+0x204/0x340 [ 55.773673][ T4431] __sys_bpf+0x52e/0x7e0 [ 55.773697][ T4431] __x64_sys_bpf+0x41/0x50 [ 55.773728][ T4431] x64_sys_call+0x10cb/0x3020 [ 55.773823][ T4429] ext4: Unknown parameter 'noacl' [ 55.773756][ T4431] do_syscall_64+0x12c/0x370 [ 55.773884][ T4431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.773906][ T4431] RIP: 0033:0x7fab8b44c629 [ 55.773924][ T4431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.773942][ T4431] RSP: 002b:00007fab89e9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.773964][ T4431] RAX: ffffffffffffffda RBX: 00007fab8b6c5fa0 RCX: 00007fab8b44c629 [ 55.773994][ T4431] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 55.774044][ T4431] RBP: 00007fab89e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.774058][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.774070][ T4431] R13: 00007fab8b6c6038 R14: 00007fab8b6c5fa0 R15: 00007ffc9adc7b58 [ 55.774089][ T4431] [ 56.039422][ T4435] loop1: detected capacity change from 0 to 512 [ 56.059470][ T4435] EXT4-fs: Ignoring removed bh option [ 56.096720][ T4435] EXT4-fs: inline encryption not supported [ 56.113210][ T4435] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.160775][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.170666][ T4435] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 56.229987][ T4435] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.223: bg 0: block 248: padding at end of block bitmap is not set [ 56.304551][ T4435] loop1: lost filesystem error report for type 5 error -117 [ 56.304851][ T4435] Quota error (device loop1): write_blk: dquota write failed [ 56.304872][ T4435] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.304900][ T4435] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.223: Failed to acquire dquot type 1 [ 56.304921][ T4435] loop1: lost filesystem error report for type 5 error -117 [ 56.305417][ T4435] EXT4-fs (loop1): 1 truncate cleaned up [ 56.305829][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 56.348406][ T4435] syz.1.223 (4435) used greatest stack depth: 8184 bytes left [ 56.352168][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 56.496694][ T4481] loop1: detected capacity change from 0 to 512 [ 56.507640][ T28] audit: type=1326 audit(1771495265.529:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.7.233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82c147c629 code=0x0 [ 56.535013][ T4481] EXT4-fs (loop1): 1 truncate cleaned up [ 56.541668][ T4481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.597848][ T4497] loop7: detected capacity change from 0 to 512 [ 56.626440][ T4497] EXT4-fs: journaled quota format not specified [ 56.656578][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.912260][ T4529] FAULT_INJECTION: forcing a failure. [ 56.912260][ T4529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.019151][ T4529] CPU: 0 UID: 0 PID: 4529 Comm: syz.5.240 Not tainted syzkaller #0 PREEMPT(full) [ 57.019254][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 57.019265][ T4529] Call Trace: [ 57.019271][ T4529] [ 57.019278][ T4529] __dump_stack+0x1d/0x30 [ 57.019305][ T4529] dump_stack_lvl+0x95/0xd0 [ 57.019395][ T4529] dump_stack+0x15/0x1b [ 57.019418][ T4529] should_fail_ex+0x263/0x280 [ 57.019439][ T4529] should_fail+0xb/0x20 [ 57.019458][ T4529] should_fail_usercopy+0x1a/0x20 [ 57.019556][ T4529] _copy_from_user+0x1c/0xb0 [ 57.019585][ T4529] __sys_bpf+0x183/0x7e0 [ 57.019613][ T4529] __x64_sys_bpf+0x41/0x50 [ 57.019644][ T4529] x64_sys_call+0x10cb/0x3020 [ 57.019745][ T4529] do_syscall_64+0x12c/0x370 [ 57.019781][ T4529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.019873][ T4529] RIP: 0033:0x7fd1212dc629 [ 57.019891][ T4529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.019911][ T4529] RSP: 002b:00007fd11fd37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.019974][ T4529] RAX: ffffffffffffffda RBX: 00007fd121555fa0 RCX: 00007fd1212dc629 [ 57.020069][ T4529] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 57.020082][ T4529] RBP: 00007fd11fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 57.020094][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.020107][ T4529] R13: 00007fd121556038 R14: 00007fd121555fa0 R15: 00007ffd93ac73b8 [ 57.020125][ T4529] [ 57.204729][ T4537] Invalid argument reading file caps for ./file0 [ 57.514777][ T4555] netlink: 'syz.7.247': attribute type 11 has an invalid length. [ 57.759510][ T4586] loop1: detected capacity change from 0 to 1024 [ 57.816240][ T4586] loop1: detected capacity change from 0 to 1081 [ 57.895411][ T4586] loop1: detected capacity change from 0 to 1081 [ 57.934628][ T4586] loop1: detected capacity change from 0 to 1081 [ 58.009985][ T4586] loop1: detected capacity change from 0 to 1081 [ 58.067030][ T4586] loop1: detected capacity change from 0 to 1081 [ 58.731760][ T4650] iso9660: Unknown parameter 'ÿ0000000000000000000000000000000000000000000' [ 58.920081][ T4664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.939298][ T4664] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.123132][ T4676] netlink: 536 bytes leftover after parsing attributes in process `syz.7.272'. [ 59.135738][ T4676] netlink: 16 bytes leftover after parsing attributes in process `syz.7.272'. [ 59.250862][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.306462][ T4688] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 59.350880][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 59.350908][ T28] audit: type=1400 audit(1771495268.379:406): avc: denied { allowed } for pid=4692 comm="syz.7.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.382592][ T4691] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 59.495781][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.282'. [ 59.511205][ T28] audit: type=1400 audit(1771495268.539:407): avc: denied { read } for pid=4700 comm="syz.5.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.544266][ T4704] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.552191][ T4704] FAT-fs (loop0): Filesystem has been set read-only [ 59.558836][ T4704] syz.0.275: attempt to access beyond end of device [ 59.558836][ T4704] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 59.575563][ T4704] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.583680][ T4704] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 59.669089][ T4713] xt_recent: Unsupported userspace flags (000000b1) [ 59.701202][ T4720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.716561][ T4720] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.774039][ T28] audit: type=1400 audit(1771495268.789:408): avc: denied { connect } for pid=4728 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.904118][ T28] audit: type=1400 audit(1771495268.789:409): avc: denied { ioctl } for pid=4728 comm="syz.1.290" path="socket:[10400]" dev="sockfs" ino=10400 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.949156][ T28] audit: type=1400 audit(1771495268.849:410): avc: denied { bind } for pid=4728 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.969103][ T28] audit: type=1400 audit(1771495268.849:411): avc: denied { setopt } for pid=4728 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.988751][ T28] audit: type=1400 audit(1771495268.889:412): avc: denied { write } for pid=4728 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.086369][ T3698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.147189][ T28] audit: type=1400 audit(1771495269.159:413): avc: denied { block_suspend } for pid=4750 comm="syz.1.298" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.186257][ T4754] EXT4-fs: Ignoring removed oldalloc option [ 60.238360][ T4754] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.300: Parent and EA inode have the same ino 15 [ 60.271225][ T28] audit: type=1326 audit(1771495269.289:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.5.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1212dc629 code=0x3fff0000 [ 60.350531][ T4754] loop7: lost filesystem error report for type 5 error -117 [ 60.355373][ T4754] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.300: Parent and EA inode have the same ino 15 [ 60.362809][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 60.362830][ C1] EXT4-fs (loop7): initial error at time 1771495269: ext4_xattr_inode_iget:437 [ 60.362858][ C1] EXT4-fs (loop7): last error at time 1771495269: ext4_xattr_inode_iget:437 [ 60.459156][ T4754] loop7: lost filesystem error report for type 5 error -117 [ 60.459462][ T4754] EXT4-fs (loop7): 1 orphan inode deleted [ 60.503525][ T4754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.660060][ T28] audit: type=1400 audit(1771495269.689:415): avc: denied { write } for pid=4766 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.694503][ T4125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.901550][ T4780] FAULT_INJECTION: forcing a failure. [ 60.901550][ T4780] name failslab, interval 1, probability 0, space 0, times 0 [ 60.923745][ T4780] CPU: 0 UID: 0 PID: 4780 Comm: syz.2.301 Not tainted syzkaller #0 PREEMPT(full) [ 60.923774][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 60.923787][ T4780] Call Trace: [ 60.923793][ T4780] [ 60.923800][ T4780] __dump_stack+0x1d/0x30 [ 60.923876][ T4780] dump_stack_lvl+0x95/0xd0 [ 60.923904][ T4780] dump_stack+0x15/0x1b [ 60.923930][ T4780] should_fail_ex+0x263/0x280 [ 60.923956][ T4780] should_failslab+0x8c/0xb0 [ 60.923981][ T4780] __kvmalloc_node_noprof+0x155/0x650 [ 60.924046][ T4780] ? xt_alloc_table_info+0x40/0x80 [ 60.924079][ T4780] xt_alloc_table_info+0x40/0x80 [ 60.924111][ T4780] do_ip6t_set_ctl+0x5e5/0x8f0 [ 60.924142][ T4780] ? kstrtoull+0x111/0x140 [ 60.924246][ T4780] ? __rcu_read_unlock+0x4e/0x70 [ 60.924275][ T4780] nf_setsockopt+0x199/0x1b0 [ 60.924311][ T4780] ipv6_setsockopt+0x11a/0x130 [ 60.924337][ T4780] tcp_setsockopt+0x98/0xb0 [ 60.924474][ T4780] sock_common_setsockopt+0x69/0x80 [ 60.924551][ T4780] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 60.924581][ T4780] __sys_setsockopt+0x184/0x200 [ 60.924607][ T4780] __x64_sys_setsockopt+0x64/0x80 [ 60.924747][ T4780] x64_sys_call+0x2327/0x3020 [ 60.924851][ T4780] do_syscall_64+0x12c/0x370 [ 60.924933][ T4780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.925026][ T4780] RIP: 0033:0x7f8cc480c629 [ 60.925054][ T4780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.925071][ T4780] RSP: 002b:00007f8cc3246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.925106][ T4780] RAX: ffffffffffffffda RBX: 00007f8cc4a86090 RCX: 00007f8cc480c629 [ 60.925121][ T4780] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 60.925136][ T4780] RBP: 00007f8cc3246090 R08: 00000000000004e8 R09: 0000000000000000 [ 60.925152][ T4780] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 60.925164][ T4780] R13: 00007f8cc4a86128 R14: 00007f8cc4a86090 R15: 00007fff7c228d78 [ 60.925181][ T4780] [ 61.228241][ T4805] set_capacity_and_notify: 12 callbacks suppressed [ 61.228257][ T4805] loop2: detected capacity change from 0 to 512 [ 61.276220][ T4805] EXT4-fs: inline encryption not supported [ 61.299248][ T4805] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 61.320631][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 61.329726][ T4808] netlink: 196 bytes leftover after parsing attributes in process `syz.0.316'. [ 61.338923][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 61.353578][ T4805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 61.366337][ T4808] netlink: 196 bytes leftover after parsing attributes in process `syz.0.316'. [ 61.380034][ T4805] System zones: 1-12 [ 61.384101][ T4805] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.428106][ T4805] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.315: bad orphan inode 267 [ 61.459824][ T4805] loop2: lost filesystem error report for type 5 error -117 [ 61.460229][ T4805] EXT4-fs (loop2): Remounting filesystem read-only [ 61.474225][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 61.474249][ C1] EXT4-fs (loop2): initial error at time 1771495270: ext4_orphan_get:1417 [ 61.474273][ C1] EXT4-fs (loop2): last error at time 1771495270: ext4_orphan_get:1417 [ 61.498320][ T4805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 61.519755][ T4813] netlink: 260 bytes leftover after parsing attributes in process `syz.0.317'. [ 61.540772][ T4805] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.315: error -117 reading directory block [ 61.596367][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 62.184949][ T4842] netlink: 'syz.1.326': attribute type 22 has an invalid length. [ 62.308077][ T4842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 62.311847][ T70] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.311916][ T70] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.312003][ T70] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.312038][ T70] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.644677][ T4856] FAULT_INJECTION: forcing a failure. [ 62.644677][ T4856] name failslab, interval 1, probability 0, space 0, times 0 [ 62.689179][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: syz.0.330 Not tainted syzkaller #0 PREEMPT(full) [ 62.689227][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.689240][ T4856] Call Trace: [ 62.689247][ T4856] [ 62.689255][ T4856] __dump_stack+0x1d/0x30 [ 62.689347][ T4856] dump_stack_lvl+0x95/0xd0 [ 62.689373][ T4856] dump_stack+0x15/0x1b [ 62.689395][ T4856] should_fail_ex+0x263/0x280 [ 62.689493][ T4856] should_failslab+0x8c/0xb0 [ 62.689517][ T4856] kmem_cache_alloc_noprof+0x66/0x400 [ 62.689595][ T4856] ? audit_log_start+0x34c/0x730 [ 62.689617][ T4856] audit_log_start+0x34c/0x730 [ 62.689649][ T4856] ? kstrtouint_from_user+0xa8/0xf0 [ 62.689675][ T4856] audit_seccomp+0x47/0x100 [ 62.689715][ T4856] ? __seccomp_filter+0x8db/0x1350 [ 62.689743][ T4856] __seccomp_filter+0x8ec/0x1350 [ 62.689792][ T4856] ? __rcu_read_unlock+0x4e/0x70 [ 62.689816][ T4856] ? __fget_files+0x184/0x1c0 [ 62.689840][ T4856] ? mutex_lock+0x57/0x90 [ 62.689865][ T4856] ? mutex_unlock+0x4e/0x90 [ 62.689891][ T4856] __secure_computing+0x81/0x150 [ 62.689985][ T4856] do_syscall_64+0xd3/0x370 [ 62.690018][ T4856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.690057][ T4856] RIP: 0033:0x7f3b7407c629 [ 62.690077][ T4856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.690126][ T4856] RSP: 002b:00007f3b72acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 62.690156][ T4856] RAX: ffffffffffffffda RBX: 00007f3b742f5fa0 RCX: 00007f3b7407c629 [ 62.690172][ T4856] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000000 [ 62.690187][ T4856] RBP: 00007f3b72acf090 R08: 0000000000000000 R09: 0000000000000000 [ 62.690202][ T4856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.690274][ T4856] R13: 00007f3b742f6038 R14: 00007f3b742f5fa0 R15: 00007fffbacc0b28 [ 62.690292][ T4856] [ 62.936729][ T4869] loop0: detected capacity change from 0 to 256 [ 62.981734][ T4865] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 62.988477][ T4865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.999541][ T4865] vhci_hcd vhci_hcd.0: Device attached [ 63.013657][ T4869] FAT-fs (loop0): Directory bread(block 64) failed [ 63.016032][ T4873] vhci_hcd: connection closed [ 63.020260][ T4869] FAT-fs (loop0): Directory bread(block 65) failed [ 63.020298][ T4869] FAT-fs (loop0): Directory bread(block 66) failed [ 63.038557][ T12] vhci_hcd vhci_hcd.5: stop threads [ 63.038926][ T4869] FAT-fs (loop0): Directory bread(block 67) failed [ 63.046821][ T12] vhci_hcd vhci_hcd.5: release socket [ 63.051511][ T4869] FAT-fs (loop0): Directory bread(block 68) failed [ 63.062550][ T4869] FAT-fs (loop0): Directory bread(block 69) failed [ 63.066155][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 63.069223][ T4869] FAT-fs (loop0): Directory bread(block 70) failed [ 63.081436][ T4869] FAT-fs (loop0): Directory bread(block 71) failed [ 63.088081][ T4869] FAT-fs (loop0): Directory bread(block 72) failed [ 63.094775][ T4869] FAT-fs (loop0): Directory bread(block 73) failed [ 63.776751][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.344'. [ 63.919546][ T4943] loop5: detected capacity change from 0 to 128 [ 63.974356][ T4943] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.170174][ T4943] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.218844][ T4978] loop2: detected capacity change from 0 to 256 [ 64.271486][ T4984] FAULT_INJECTION: forcing a failure. [ 64.271486][ T4984] name failslab, interval 1, probability 0, space 0, times 0 [ 64.303423][ T4984] CPU: 1 UID: 0 PID: 4984 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) [ 64.303522][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.303536][ T4984] Call Trace: [ 64.303543][ T4984] [ 64.303550][ T4984] __dump_stack+0x1d/0x30 [ 64.303577][ T4984] dump_stack_lvl+0x95/0xd0 [ 64.303601][ T4984] dump_stack+0x15/0x1b [ 64.303663][ T4984] should_fail_ex+0x263/0x280 [ 64.303684][ T4984] should_failslab+0x8c/0xb0 [ 64.303703][ T4984] __kvmalloc_node_noprof+0x155/0x650 [ 64.303808][ T4984] ? path_openat+0x1ab2/0x2050 [ 64.303844][ T4984] ? traverse+0xa2/0x3a0 [ 64.303878][ T4984] traverse+0xa2/0x3a0 [ 64.303903][ T4984] ? _parse_integer_limit+0x170/0x190 [ 64.303934][ T4984] seq_read_iter+0x85f/0x940 [ 64.304155][ T4984] ? _parse_integer+0x27/0x40 [ 64.304201][ T4984] ? kstrtoull+0x111/0x140 [ 64.304232][ T4984] seq_read+0x279/0x2c0 [ 64.304269][ T4984] ? __pfx_seq_read+0x10/0x10 [ 64.304313][ T4984] proc_reg_read+0x128/0x1c0 [ 64.304358][ T4984] ? __pfx_proc_reg_read+0x10/0x10 [ 64.304404][ T4984] vfs_read+0x1ab/0x7f0 [ 64.304497][ T4984] ? __rcu_read_unlock+0x4e/0x70 [ 64.304521][ T4984] ? __fget_files+0x184/0x1c0 [ 64.304548][ T4984] ? mutex_unlock+0x4e/0x90 [ 64.304580][ T4984] __x64_sys_pread64+0xfd/0x150 [ 64.304609][ T4984] x64_sys_call+0x27b5/0x3020 [ 64.304639][ T4984] do_syscall_64+0x12c/0x370 [ 64.304679][ T4984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.304729][ T4984] RIP: 0033:0x7f8cc480c629 [ 64.304748][ T4984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.304769][ T4984] RSP: 002b:00007f8cc3267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 64.304853][ T4984] RAX: ffffffffffffffda RBX: 00007f8cc4a85fa0 RCX: 00007f8cc480c629 [ 64.304866][ T4984] RDX: 0000000000000098 RSI: 0000200000000240 RDI: 0000000000000005 [ 64.304881][ T4984] RBP: 00007f8cc3267090 R08: 0000000000000000 R09: 0000000000000000 [ 64.304896][ T4984] R10: 00000000000000e1 R11: 0000000000000246 R12: 0000000000000001 [ 64.304910][ T4984] R13: 00007f8cc4a86038 R14: 00007f8cc4a85fa0 R15: 00007fff7c228d78 [ 64.304936][ T4984] [ 64.470822][ T4940] netlink: 44 bytes leftover after parsing attributes in process `syz.5.346'. [ 64.728324][ T3698] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.770980][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 64.770997][ T28] audit: type=1400 audit(1771495279.889:491): avc: denied { ioctl } for pid=5002 comm="syz.5.356" path="socket:[10729]" dev="sockfs" ino=10729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.810232][ T28] audit: type=1400 audit(1771495279.889:492): avc: denied { read } for pid=5002 comm="syz.5.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.846937][ T28] audit: type=1400 audit(1771495279.921:493): avc: denied { sqpoll } for pid=5002 comm="syz.5.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.548813][ T5023] loop2: detected capacity change from 0 to 512 [ 65.577165][ T28] audit: type=1400 audit(1771495280.729:494): avc: denied { connect } for pid=5019 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.589208][ T5023] EXT4-fs: Ignoring removed bh option [ 65.616906][ T28] audit: type=1400 audit(1771495280.761:495): avc: denied { write } for pid=5019 comm="syz.1.360" path="socket:[9865]" dev="sockfs" ino=9865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.664103][ T28] audit: type=1400 audit(1771495280.813:496): avc: denied { watch_reads } for pid=5019 comm="syz.1.360" path="/76" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.678067][ T5023] EXT4-fs: inline encryption not supported [ 65.731011][ T5023] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.788118][ T5023] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 65.812787][ T5023] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.361: bg 0: block 248: padding at end of block bitmap is not set [ 65.827393][ T5023] loop2: lost filesystem error report for type 5 error -117 [ 65.830554][ T5023] Quota error (device loop2): write_blk: dquota write failed [ 65.837885][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 65.837921][ C1] EXT4-fs (loop2): last error at time 1771495280: ext4_validate_block_bitmap:441 [ 65.861014][ T5023] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 65.871090][ T5023] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.361: Failed to acquire dquot type 1 [ 65.882270][ T5023] loop2: lost filesystem error report for type 5 error -117 [ 65.892428][ T5023] EXT4-fs (loop2): 1 truncate cleaned up [ 65.913087][ T5023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 65.989151][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 66.385915][ T28] audit: type=1400 audit(1771495281.580:497): avc: denied { ioctl } for pid=5035 comm="syz.1.364" path="socket:[9891]" dev="sockfs" ino=9891 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.579013][ T5082] loop0: detected capacity change from 0 to 1024 [ 67.602187][ T28] audit: type=1400 audit(1771495282.861:498): avc: denied { read } for pid=5083 comm="syz.1.378" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 67.643431][ T5082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 67.657086][ T5082] System zones: 0-1, 3-36 [ 67.704142][ T5082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.770802][ T5091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.821444][ T5092] loop1: detected capacity change from 0 to 512 [ 67.829154][ T5092] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 68.166474][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.361226][ T5113] loop0: detected capacity change from 0 to 512 [ 69.367536][ T5113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.471266][ T5113] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 69.964268][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 69.964286][ T28] audit: type=1400 audit(1771495285.160:500): avc: denied { getopt } for pid=5111 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.297339][ T28] audit: type=1400 audit(1771495285.643:501): avc: denied { write } for pid=5134 comm="syz.1.392" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.580383][ T28] audit: type=1400 audit(1771495285.979:502): avc: denied { ioctl } for pid=5140 comm="syz.2.395" path="socket:[10042]" dev="sockfs" ino=10042 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.644537][ T28] audit: type=1400 audit(1771495285.989:503): avc: denied { write } for pid=5140 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.735510][ T5148] netlink: 'syz.0.396': attribute type 9 has an invalid length. [ 70.751157][ T5148] netlink: 'syz.0.396': attribute type 6 has an invalid length. [ 70.800422][ T5151] loop2: detected capacity change from 0 to 128 [ 70.821723][ T5151] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 70.850046][ T28] audit: type=1400 audit(1771495286.262:504): avc: denied { setopt } for pid=5150 comm="syz.2.398" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.943603][ T28] audit: type=1400 audit(1771495286.357:505): avc: denied { mount } for pid=5155 comm="syz.2.400" name="/" dev="ramfs" ino=10079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 71.077342][ T5166] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.404'. [ 71.412696][ T28] audit: type=1400 audit(1771495286.850:506): avc: denied { name_connect } for pid=5180 comm="syz.0.410" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 71.496363][ T5184] FAULT_INJECTION: forcing a failure. [ 71.496363][ T5184] name failslab, interval 1, probability 0, space 0, times 0 [ 71.509053][ T5184] CPU: 1 UID: 0 PID: 5184 Comm: syz.1.409 Not tainted syzkaller #0 PREEMPT(full) [ 71.509079][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.509093][ T5184] Call Trace: [ 71.509102][ T5184] [ 71.509112][ T5184] __dump_stack+0x1d/0x30 [ 71.509139][ T5184] dump_stack_lvl+0x95/0xd0 [ 71.509214][ T5184] dump_stack+0x15/0x1b [ 71.509240][ T5184] should_fail_ex+0x263/0x280 [ 71.509263][ T5184] should_failslab+0x8c/0xb0 [ 71.509362][ T5184] kmem_cache_alloc_noprof+0x66/0x400 [ 71.509461][ T5184] ? do_timer_create+0x17a/0x980 [ 71.509482][ T5184] do_timer_create+0x17a/0x980 [ 71.509529][ T5184] ? should_fail_ex+0xd9/0x280 [ 71.509555][ T5184] __x64_sys_timer_create+0xb9/0xe0 [ 71.509592][ T5184] x64_sys_call+0x2a3e/0x3020 [ 71.509700][ T5184] do_syscall_64+0x12c/0x370 [ 71.509737][ T5184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.509758][ T5184] RIP: 0033:0x7fab8b44c629 [ 71.509781][ T5184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.509799][ T5184] RSP: 002b:00007fab89e5d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 71.509824][ T5184] RAX: ffffffffffffffda RBX: 00007fab8b6c6180 RCX: 00007fab8b44c629 [ 71.509842][ T5184] RDX: 0000200000000300 RSI: 00002000000000c0 RDI: 0000000000000000 [ 71.509855][ T5184] RBP: 00007fab89e5d090 R08: 0000000000000000 R09: 0000000000000000 [ 71.509872][ T5184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.509887][ T5184] R13: 00007fab8b6c6218 R14: 00007fab8b6c6180 R15: 00007ffc9adc7b58 [ 71.509906][ T5184] [ 72.030975][ T28] audit: type=1400 audit(1771495287.501:507): avc: denied { getopt } for pid=5185 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.124855][ T28] audit: type=1400 audit(1771495287.606:508): avc: denied { create } for pid=5187 comm="syz.0.412" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 72.125878][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 72.192816][ T28] audit: type=1400 audit(1771495287.606:509): avc: denied { read } for pid=5187 comm="syz.0.412" name="file0" dev="tmpfs" ino=465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 72.945440][ T5210] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 72.953341][ T3301] IPVS: starting estimator thread 0... [ 73.057268][ T5211] IPVS: using max 2112 ests per chain, 105600 per kthread [ 73.464545][ T5221] loop0: detected capacity change from 0 to 1024 [ 73.599489][ T5221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.158074][ T5228] loop5: detected capacity change from 0 to 512 [ 74.197010][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.207474][ T5228] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.423: iget: bad extra_isize 90 (inode size 256) [ 74.260675][ T5228] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.260925][ T5228] EXT4-fs (loop5): Remounting filesystem read-only [ 74.270170][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 74.270188][ C1] EXT4-fs (loop5): initial error at time 1771495289: ext4_xattr_inode_iget:441: inode 11 [ 74.270241][ C1] EXT4-fs (loop5): last error at time 1771495289: ext4_xattr_inode_iget:441: inode 11 [ 74.318667][ T5231] loop0: detected capacity change from 0 to 1024 [ 74.349573][ T5231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.352088][ T5228] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 74.383929][ T5231] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.424: missing EA_INODE flag [ 74.427652][ T5228] EXT4-fs (loop5): 1 orphan inode deleted [ 74.449932][ T5228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.462564][ T5231] EXT4-fs (loop0): Remounting filesystem read-only [ 74.501194][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.523571][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.636360][ T5189] loop2: detected capacity change from 0 to 512 [ 74.656596][ T5189] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.663352][ T5189] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.411: Failed to acquire dquot type 1 [ 74.681844][ T5189] loop2: lost filesystem error report for type 5 error -5 [ 74.683324][ T5189] EXT4-fs (loop2): 1 truncate cleaned up [ 74.690546][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 74.690570][ C0] EXT4-fs (loop2): last error at time 1771495290: ext4_acquire_dquot:7003 [ 74.715702][ T5189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.786875][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.859501][ T5243] loop0: detected capacity change from 0 to 1024 [ 75.116116][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 75.116135][ T28] audit: type=1400 audit(1771495290.746:560): avc: denied { getattr } for pid=5257 comm="syz.5.434" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=10230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.178923][ T5259] futex_wake_op: syz.5.434 tries to shift op by -1; fix this program [ 75.198578][ T5263] netlink: 'syz.2.436': attribute type 16 has an invalid length. [ 75.206469][ T5263] netlink: 'syz.2.436': attribute type 17 has an invalid length. [ 75.210037][ T28] audit: type=1400 audit(1771495290.830:561): avc: denied { read } for pid=5262 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.254677][ T5265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.436'. [ 75.401478][ T5263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.446830][ T28] audit: type=1400 audit(1771495291.082:562): avc: denied { read } for pid=5274 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.492513][ T28] audit: type=1400 audit(1771495291.082:563): avc: denied { open } for pid=5274 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.540576][ T28] audit: type=1400 audit(1771495291.082:564): avc: denied { mounton } for pid=5274 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.563142][ T28] audit: type=1400 audit(1771495291.124:565): avc: denied { module_request } for pid=5274 comm="syz-executor" kmod="netdev-nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.604881][ T28] audit: type=1400 audit(1771495291.166:566): avc: denied { sys_module } for pid=5274 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.675028][ T58] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.722956][ T28] audit: type=1400 audit(1771495291.376:567): avc: denied { write } for pid=5278 comm="syz.5.441" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.774641][ T58] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.809250][ T28] audit: type=1400 audit(1771495291.376:568): avc: denied { open } for pid=5278 comm="syz.5.441" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.897186][ T58] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.926683][ T28] audit: type=1400 audit(1771495291.428:569): avc: denied { block_suspend } for pid=5283 comm="syz.2.442" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.993745][ T58] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.029282][ T5299] netlink: 'syz.5.448': attribute type 1 has an invalid length. [ 76.054831][ T5299] netlink: 'syz.5.448': attribute type 2 has an invalid length. [ 76.100581][ T5299] loop5: detected capacity change from 0 to 512 [ 76.176361][ T5274] chnl_net:caif_netlink_parms(): no params data found [ 76.184442][ T5299] FAT-fs (loop5): bogus number of FAT sectors [ 76.225881][ T5299] FAT-fs (loop5): Can't find a valid FAT filesystem [ 76.227399][ T5312] loop0: detected capacity change from 0 to 512 [ 76.243034][ T58] bridge_slave_1: left allmulticast mode [ 76.255384][ T5312] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.284299][ T58] bridge_slave_1: left promiscuous mode [ 76.311778][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.325939][ T58] bridge_slave_0: left allmulticast mode [ 76.332947][ T58] bridge_slave_0: left promiscuous mode [ 76.341418][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.371156][ T5312] EXT4-fs (loop0): 1 truncate cleaned up [ 76.413665][ T5327] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 76.419118][ T5312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.420387][ T5327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.477616][ T5327] vhci_hcd vhci_hcd.0: Device attached [ 76.561433][ T58] team0: Port device bond0 removed [ 76.573856][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.604723][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.628648][ T58] bond0 (unregistering): Released all slaves [ 76.646900][ T3393] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 76.704734][ T5330] vhci_hcd: connection closed [ 76.705191][ T3713] vhci_hcd vhci_hcd.2: stop threads [ 76.715462][ T3393] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 76.732647][ T3713] vhci_hcd vhci_hcd.2: release socket [ 76.747007][ T3713] vhci_hcd vhci_hcd.2: disconnect device [ 76.757639][ T58] hsr_slave_0: left promiscuous mode [ 76.805348][ T58] hsr_slave_1: left promiscuous mode [ 76.819778][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.836081][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.859525][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.880579][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.915094][ T58] veth1_macvtap: left promiscuous mode [ 76.920778][ T58] veth0_macvtap: left promiscuous mode [ 76.926614][ T58] veth1_vlan: left promiscuous mode [ 76.944263][ T58] veth0_vlan: left promiscuous mode [ 77.105190][ T58] team0 (unregistering): Port device team_slave_1 removed [ 77.122441][ T58] team0 (unregistering): Port device team_slave_0 removed [ 77.226359][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.241960][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.270654][ T5274] bridge_slave_0: entered allmulticast mode [ 77.288425][ T5377] loop1: detected capacity change from 0 to 1024 [ 77.290685][ T5274] bridge_slave_0: entered promiscuous mode [ 77.311585][ T5377] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 77.333746][ T5377] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.459'. [ 77.344793][ T5377] netlink: zone id is out of range [ 77.351444][ T5377] netlink: zone id is out of range [ 77.368911][ T5377] netlink: zone id is out of range [ 77.371103][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.380574][ T5377] netlink: zone id is out of range [ 77.394848][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.402669][ T5377] netlink: zone id is out of range [ 77.409620][ T5377] netlink: zone id is out of range [ 77.411882][ T5274] bridge_slave_1: entered allmulticast mode [ 77.415222][ T5377] netlink: zone id is out of range [ 77.438924][ T5377] netlink: zone id is out of range [ 77.446098][ T5274] bridge_slave_1: entered promiscuous mode [ 77.456910][ T5377] netlink: zone id is out of range [ 77.538094][ T5274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.572737][ T5274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.643925][ T5274] team0: Port device team_slave_0 added [ 77.701833][ T5274] team0: Port device team_slave_1 added [ 77.747937][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 77.770976][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.786931][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.821082][ T5274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.832976][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.840786][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.868928][ T5274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.920378][ T5274] hsr_slave_0: entered promiscuous mode [ 77.927309][ T5274] hsr_slave_1: entered promiscuous mode [ 77.934983][ T5274] debugfs: 'hsr0' already exists in 'hsr' [ 77.940729][ T5274] Cannot create hsr debugfs directory [ 78.086950][ T5420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5420 comm=syz.5.469 [ 78.198550][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.241069][ T5427] loop0: detected capacity change from 0 to 1024 [ 78.253781][ T5427] EXT4-fs: inline encryption not supported [ 78.259313][ T5426] loop5: detected capacity change from 0 to 512 [ 78.266316][ T5427] EXT4-fs: Ignoring removed i_version option [ 78.279787][ T5427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.325233][ T5426] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 78.344325][ T5426] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 78.351524][ T5426] System zones: 0-1, 15-15, 18-18, 34-34 [ 78.352479][ T5426] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.374458][ T5426] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 78.389172][ T5426] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 78.397154][ T5426] EXT4-fs (loop5): 1 truncate cleaned up [ 78.403416][ T5426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.446319][ T9] IPVS: starting estimator thread 0... [ 78.482868][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.507380][ T3698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.533790][ T5433] IPVS: using max 2496 ests per chain, 124800 per kthread [ 78.789686][ T5459] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 78.974707][ T5462] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 79.217433][ T5465] syzkaller0: entered promiscuous mode [ 79.223810][ T5465] syzkaller0: entered allmulticast mode [ 79.333567][ T5467] loop2: detected capacity change from 0 to 1024 [ 79.355497][ T5467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.488127][ T5473] loop0: detected capacity change from 0 to 128 [ 79.508632][ T5473] dvmrp0: entered allmulticast mode [ 80.145485][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.189311][ T5469] dvmrp0: left allmulticast mode [ 80.241259][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 80.241279][ T28] audit: type=1400 audit(1771495296.121:703): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 80.406967][ T28] audit: type=1400 audit(1771495296.300:704): avc: denied { read } for pid=5492 comm="syz.0.495" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.431564][ T28] audit: type=1400 audit(1771495296.321:705): avc: denied { ioctl } for pid=5492 comm="syz.0.495" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.554743][ T5404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.566460][ T5274] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 80.600030][ T5274] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 80.621008][ T5274] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 80.650939][ T5274] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 80.681668][ T28] audit: type=1400 audit(1771495296.583:706): avc: denied { create } for pid=5498 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.773673][ T28] audit: type=1400 audit(1771495296.688:707): avc: denied { read } for pid=5498 comm="syz.5.496" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.801760][ T5274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.815510][ T28] audit: type=1400 audit(1771495296.688:708): avc: denied { open } for pid=5498 comm="syz.5.496" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.819248][ T5499] rtc_cmos 00:00: Alarms can be up to one day in the future [ 80.858569][ T5274] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.873404][ T28] audit: type=1400 audit(1771495296.688:709): avc: denied { ioctl } for pid=5498 comm="syz.5.496" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.879196][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.905280][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.947344][ T28] audit: type=1400 audit(1771495296.825:710): avc: denied { setopt } for pid=5498 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.969311][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.976407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.000782][ T5525] xt_hashlimit: size too large, truncated to 1048576 [ 81.003136][ T28] audit: type=1400 audit(1771495296.825:711): avc: denied { getopt } for pid=5498 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.045062][ T28] audit: type=1400 audit(1771495296.961:712): avc: denied { read } for pid=5527 comm="syz.1.507" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.087088][ T5274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.199757][ T5274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.270716][ T5547] loop1: detected capacity change from 0 to 256 [ 81.363601][ T5556] loop0: detected capacity change from 0 to 512 [ 81.396746][ T5556] ext4: Unknown parameter 'mask' [ 81.522756][ T5274] veth0_vlan: entered promiscuous mode [ 81.545040][ T5274] veth1_vlan: entered promiscuous mode [ 81.557778][ T3393] usb 5-1: enqueue for inactive port 0 [ 81.577215][ T3393] usb 5-1: enqueue for inactive port 0 [ 81.627353][ T5574] loop0: detected capacity change from 0 to 4096 [ 81.655148][ T5578] netlink: 152 bytes leftover after parsing attributes in process `syz.1.505'. [ 81.667406][ T3393] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 81.687000][ T5274] veth0_macvtap: entered promiscuous mode [ 81.713674][ T5274] veth1_macvtap: entered promiscuous mode [ 81.739911][ T5574] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 81.785689][ T5574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.788273][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.807678][ T5574] netlink: 104 bytes leftover after parsing attributes in process `syz.0.504'. [ 81.816819][ T5574] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 81.844565][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.857499][ T3713] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.887145][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.910454][ T3713] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.952906][ T3713] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.976076][ T5590] loop2: detected capacity change from 0 to 128 [ 81.985568][ T3713] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.458907][ T5606] loop8: detected capacity change from 0 to 256 [ 82.538274][ T5606] FAT-fs (loop8): Directory bread(block 64) failed [ 82.545897][ T5606] FAT-fs (loop8): Directory bread(block 65) failed [ 82.554322][ T5606] FAT-fs (loop8): Directory bread(block 66) failed [ 82.561919][ T5608] syzkaller0: entered promiscuous mode [ 82.562134][ T5606] FAT-fs (loop8): Directory bread(block 67) failed [ 82.567623][ T5608] syzkaller0: entered allmulticast mode [ 82.630368][ T5608] tipc: Started in network mode [ 82.635727][ T5606] FAT-fs (loop8): Directory bread(block 68) failed [ 82.642226][ T5608] tipc: Node identity fadbd71d57d1, cluster identity 4711 [ 82.642365][ T5608] tipc: Enabled bearer , priority 0 [ 82.649747][ T5606] FAT-fs (loop8): Directory bread(block 69) failed [ 82.663474][ T5606] FAT-fs (loop8): Directory bread(block 70) failed [ 82.670150][ T5607] tipc: Resetting bearer [ 82.673133][ T5606] FAT-fs (loop8): Directory bread(block 71) failed [ 82.682570][ T5606] FAT-fs (loop8): Directory bread(block 72) failed [ 82.690729][ T5607] tipc: Disabling bearer [ 82.694957][ T5606] FAT-fs (loop8): Directory bread(block 73) failed [ 82.763990][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.511'. [ 82.858024][ T5614] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.963450][ T5621] syzkaller0: entered promiscuous mode [ 83.002806][ T5621] syzkaller0: entered allmulticast mode [ 83.025312][ T5621] tipc: Started in network mode [ 83.038641][ T5621] tipc: Node identity ce46b2bf5a55, cluster identity 4711 [ 83.055540][ T5621] tipc: Enabled bearer , priority 0 [ 83.076671][ T5620] tipc: Resetting bearer [ 83.101165][ T5620] tipc: Disabling bearer [ 83.164046][ T5633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 83.207028][ T5635] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 83.219837][ T5633] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 83.493875][ T5633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.529697][ T5641] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 83.560956][ T5614] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.650694][ T5647] loop2: detected capacity change from 0 to 4096 [ 83.677947][ T5647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.737698][ T5655] loop0: detected capacity change from 0 to 4096 [ 83.784018][ T5655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.808241][ T5655] FAULT_INJECTION: forcing a failure. [ 83.808241][ T5655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.821856][ T5655] CPU: 1 UID: 0 PID: 5655 Comm: syz.0.527 Not tainted syzkaller #0 PREEMPT(full) [ 83.821928][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.821942][ T5655] Call Trace: [ 83.821949][ T5655] [ 83.821956][ T5655] __dump_stack+0x1d/0x30 [ 83.821986][ T5655] dump_stack_lvl+0x95/0xd0 [ 83.822086][ T5655] dump_stack+0x15/0x1b [ 83.822111][ T5655] should_fail_ex+0x263/0x280 [ 83.822137][ T5655] should_fail+0xb/0x20 [ 83.822157][ T5655] should_fail_usercopy+0x1a/0x20 [ 83.822183][ T5655] _copy_from_user+0x1c/0xb0 [ 83.822285][ T5655] __sys_sendto+0x1ca/0x4d0 [ 83.822320][ T5655] __x64_sys_sendto+0x76/0x90 [ 83.822347][ T5655] x64_sys_call+0x2d35/0x3020 [ 83.822377][ T5655] do_syscall_64+0x12c/0x370 [ 83.822470][ T5655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.822495][ T5655] RIP: 0033:0x7f3b7403cece [ 83.822513][ T5655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.822532][ T5655] RSP: 002b:00007f3b72acde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.822557][ T5655] RAX: ffffffffffffffda RBX: 00007f3b72acf6c0 RCX: 00007f3b7403cece [ 83.822592][ T5655] RDX: 0000000000000024 RSI: 00007f3b72ace000 RDI: 0000000000000005 [ 83.822607][ T5655] RBP: 0000000000000000 R08: 00007f3b72acdf04 R09: 000000000000000c [ 83.822620][ T5655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 83.822634][ T5655] R13: 00007f3b72acdf58 R14: 00007f3b72ace000 R15: 0000000000000000 [ 83.822652][ T5655] [ 84.013570][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.082879][ T5614] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.319454][ T5614] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.361815][ T3713] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.382143][ T3713] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.401928][ T3713] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.421787][ T3713] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.157039][ T5690] loop1: detected capacity change from 0 to 256 [ 85.177085][ T5690] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.190827][ T5692] loop0: detected capacity change from 0 to 512 [ 85.215842][ T5692] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.539: inode has both inline data and extents flags [ 85.232926][ T5692] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.233197][ T5692] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.539: couldn't read orphan inode 15 (err -117) [ 85.242440][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 85.242476][ C0] EXT4-fs (loop0): initial error at time 1771495301: ext4_orphan_get:1391: inode 15 [ 85.242507][ C0] EXT4-fs (loop0): last error at time 1771495301: ext4_orphan_get:1391: inode 15 [ 85.282627][ T5694] batadv_slave_0: entered promiscuous mode [ 85.288942][ T5692] loop0: lost filesystem error report for type 5 error -117 [ 85.289548][ T5692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.311692][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 85.311744][ T28] audit: type=1400 audit(1771495301.444:779): avc: denied { setattr } for pid=5691 comm="syz.0.539" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.344614][ T28] audit: type=1400 audit(1771495301.486:780): avc: denied { create } for pid=5691 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.409440][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.424109][ T28] audit: type=1400 audit(1771495301.486:781): avc: denied { bind } for pid=5691 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.445131][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.448330][ T28] audit: type=1400 audit(1771495301.486:782): avc: denied { listen } for pid=5691 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.516227][ T28] audit: type=1400 audit(1771495301.486:783): avc: denied { connect } for pid=5691 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.553463][ T28] audit: type=1400 audit(1771495301.486:784): avc: denied { accept } for pid=5691 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.593724][ T28] audit: type=1400 audit(1771495301.486:785): avc: denied { setopt } for pid=5691 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.725638][ T28] audit: type=1400 audit(1771495301.486:786): avc: denied { read } for pid=5691 comm="syz.0.539" path="socket:[12066]" dev="sockfs" ino=12066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.763870][ T5719] syzkaller0: entered promiscuous mode [ 85.769445][ T5719] syzkaller0: entered allmulticast mode [ 85.781374][ T5719] netlink: 44 bytes leftover after parsing attributes in process `syz.2.546'. [ 85.810183][ T5719] netlink: 43 bytes leftover after parsing attributes in process `syz.2.546'. [ 85.838058][ T5719] netlink: 'syz.2.546': attribute type 5 has an invalid length. [ 85.844056][ T28] audit: type=1400 audit(1771495301.518:787): avc: denied { write } for pid=5695 comm="syz.8.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.845744][ T5719] netlink: 43 bytes leftover after parsing attributes in process `syz.2.546'. [ 85.917370][ T28] audit: type=1400 audit(1771495301.539:788): avc: denied { create } for pid=5691 comm="syz.0.539" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 85.974770][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'. [ 86.088859][ T5732] netlink: 1 bytes leftover after parsing attributes in process `syz.0.547'. [ 86.332374][ T5738] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 86.339885][ T3516] IPVS: starting estimator thread 0... [ 86.428236][ T5748] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 86.570432][ T5739] IPVS: using max 2256 ests per chain, 112800 per kthread [ 86.976930][ T5781] tmpfs: Bad value for 'mpol' [ 87.082335][ T5791] loop0: detected capacity change from 0 to 512 [ 87.090849][ T5789] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 87.272921][ T5799] net_ratelimit: 117 callbacks suppressed [ 87.272940][ T5799] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 87.294160][ T5802] loop2: detected capacity change from 0 to 128 [ 87.323444][ T5802] FAT-fs (loop2): unable to read boot sector [ 87.370633][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 87.657899][ T5819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.572'. [ 87.902809][ T5818] ================================================================== [ 87.910952][ T5818] BUG: KCSAN: data-race in sg_common_write / sg_finish_rem_req [ 87.918549][ T5818] [ 87.920904][ T5818] write to 0xffff888117b7b31d of 1 bytes by task 3407 on cpu 1: [ 87.928644][ T5818] sg_finish_rem_req+0x11f/0x270 [ 87.933625][ T5818] sg_rq_end_io_usercontext+0x38/0x1c0 [ 87.939119][ T5818] process_scheduled_works+0x4de/0x9e0 [ 87.944611][ T5818] worker_thread+0x581/0x770 [ 87.949253][ T5818] kthread+0x22a/0x280 [ 87.953357][ T5818] ret_from_fork+0x150/0x360 [ 87.957986][ T5818] ret_from_fork_asm+0x1a/0x30 [ 87.962866][ T5818] [ 87.965215][ T5818] read to 0xffff888117b7b31d of 1 bytes by task 5818 on cpu 0: [ 87.972783][ T5818] sg_common_write+0x952/0xc80 [ 87.977585][ T5818] sg_new_write+0x7e4/0x8c0 [ 87.982126][ T5818] sg_ioctl+0xbf8/0x1350 [ 87.986401][ T5818] __se_sys_ioctl+0xce/0x140 [ 87.991041][ T5818] __x64_sys_ioctl+0x43/0x50 [ 87.995674][ T5818] x64_sys_call+0x1563/0x3020 [ 88.000431][ T5818] do_syscall_64+0x12c/0x370 [ 88.005145][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.011063][ T5818] [ 88.013402][ T5818] value changed: 0x01 -> 0x00 [ 88.018100][ T5818] [ 88.020434][ T5818] Reported by Kernel Concurrency Sanitizer on: [ 88.026645][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.0.574 Not tainted syzkaller #0 PREEMPT(full) [ 88.036133][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.046215][ T5818] ==================================================================