last executing test programs: 2m35.962846304s ago: executing program 4 (id=174): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000300)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r6, &(0x7f0000000380)=""/185, 0xb9) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x130, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) syz_usb_connect$uac1(0x1, 0xdb, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x5, 0x20, 0xd2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x342b, 0x39}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0xc}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x0, 0x8], 0x60}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0xce}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xff}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x10, "a28972f5e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x7, 0x8, 'wO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x10, 0xf9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe6, 0x9, 0x2, "3341d8228df650"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7, 0xd, "dcc2d1b1331f036c"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xc5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x6, 0x3, 0xfa, 0xff, 0x80}, 0x103, &(0x7f0000000740)={0x5, 0xf, 0x103, 0x2, [@generic={0x6f, 0x10, 0xa, "83b726df289295e59e5ba65b943e86d9c0d9973c693364891ab566cd52d5aabe1d1705c7101b2f97cd7bb1a1b2673baa14cf9e6019199f8cee5491bbef4180bf124f0b460144d3380da4212726ab6d1160de9d8039f5b76124c8df6d30a95e02fad181abaf3454c9e913ef72"}, @generic={0x8f, 0x10, 0x2, "b6c0e23e01f3c07b7946805225d89bc2ed0431c2a1ea51152298fa4bce498abdff405fc3e382f702c94832c93c35a85dc6a527ad35f8b48620573e417479a71e71c55f2ecbe5b0829fd72d6d80179b907230c59f4a1b8bdd5c1b892c752ba01e260c713d5aa320a71543b6ff4aa4bcc8a495d674fe75339cfb1fd2b8dcb2cee132bbbee1788793304e79fe60"}]}, 0x1, [{0x72, &(0x7f0000000640)=@string={0x72, 0x3, "a9a5b18ac25a06718aeb3a61e1eb0afe391d8a1ac2be6f93dc26bac202e38f3752774804529df048efde183f9f2843957bf10d88c093c9026b0af4aaf73a4f0888186be93fe5abf77d747dc4dc842e3d7595abb576ca8c640eb3160ec034ea880fb91c53e5fcb98f2de23dd86284d419"}}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) 2m34.134605349s ago: executing program 4 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e2, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a400030062"], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x5, 0x2, r3, 0x0, 0x0, 0x0, 0xfe}]) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB="104b543d9d955e31c42ae8abb0f5f3403ac6b0a22344e55413852f5c4c13cb472bd9dd1e04fd3455189ad9063acc8f8c9cdb946919d5f2eb5fc8c83a013d928078569c75fba4437a9841854b3310335c741d88600b6b", @ANYBLOB="010000000000000000000a000000900004", @ANYRESDEC=r0], 0xa4}}, 0x48011) 2m33.733626776s ago: executing program 4 (id=197): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8947, &(0x7f0000000040)={'bond0\x00', @ifru_flags=0x2000}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0xa, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x2008840) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x1d, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x6, 0x0, 0x4e16, 0x4, 0x0, 0x9, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8000000, 0x4, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x6, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x3, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x800, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x8, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x200001, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x5, 0xc}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 2m33.577193037s ago: executing program 4 (id=201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x0, 0xffff, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147245ed5bdcdfaf4e9530630c66996c4905b"}, 0xd8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="89a197b5a78bf9650453617ecad472d1", 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) r2 = io_uring_setup(0x32f6, &(0x7f0000000080)={0x0, 0xbae3, 0x2, 0x2, 0x1da, 0x0, r1}) fremovexattr(r2, &(0x7f0000000100)=@random={'osx.', 'trusted.overlay.origin\x00'}) r3 = socket$inet6(0xa, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000001600)={&(0x7f00000015c0)=[{&(0x7f00000005c0)="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", 0x1000}], 0x1, 0x100000001, 0x0, 0x6437, 0x4, 0x6, 0x2, 0x7}) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000001c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) readahead(r4, 0x2, 0xd5ac) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000280)="4890131cf634e2f6d81051a411012c748828d3d49f792c1e7731a99d283a26df84bef7a4a82f4d473676c138c5ff8d09ec6ae041d854a0b471b6f771d5cb1c151759a7dd60659ac9ea8e513463393e98705b4691ea51015da71cb3efc844f8942b751d3738c8027b1ec6dbb0f0a8f00062fd6a43adc76de7fbffd305918cfa94cacd7e60a8505d973d13bb75db249a9c4dc8184100edd8e3b0599b5128a4f259299be18f82efba923b064cf4aea2642f7efc", 0xb2) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x0, 0x0, 0xffff, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147245ed5bdcdfaf4e9530630c66996c4905b"}, 0xd8) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="89a197b5a78bf9650453617ecad472d1", 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) (async) io_uring_setup(0x32f6, &(0x7f0000000080)={0x0, 0xbae3, 0x2, 0x2, 0x1da, 0x0, r1}) (async) fremovexattr(r2, &(0x7f0000000100)=@random={'osx.', 'trusted.overlay.origin\x00'}) (async) socket$inet6(0xa, 0x5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) ioctl$BTRFS_IOC_ENCODED_WRITE(r3, 0x40809440, &(0x7f0000001600)={&(0x7f00000015c0)=[{&(0x7f00000005c0)="5de4040ce2fdc811b79f00b60ee4ff3fbcb7bb6b595c0f763a65d95a76b61bab7e41008ffc0616b341ea79f129d4bf87976e6e07f0200a775acdfac8ae566f7de2844310746373f169bcc651410118f806dc3de8f9240f9ef93cbc4073bf799d991a9c900fd88e41766398ecd82e8052661f40ffb3fdc36bc129a5e73353809f3e919fedba184824e261cbffb790ff5c71fcfef8d94edced244c48c135dd9799283e274b329499a9923930d831ea863a098325840171edbfb9711252537a5003317bc7e4029561b5cd9f453afa352a79dc4f946361c742b5bfe1239997a426aa17522b33b8ba3507990ad8135ada685189f21dcb36656f55500b1d0da858a6712cb923ef539358e208973b44793fda26dd5797b516efe748fa528920da223b6fd7c0e3a289738dabdac058026dbbb4f838828c2cc35febf652c4868504ab5562fff64e2011fa0c9ec69cdb259d3cbf68ceb7d594879681b28b661687addf9a0ce80aefd4c8d11ea7056845a4f321e4c61b64076430c3ced66d85d0f4d771d952aac4f5010962a1e88dffcab3f0b970a5a09c92aae7a2c13d3e66871d316b27c37822fc9bd45da8f6e9bea0216ae5f63414bb3f98bccafb9f898aa07f65f2ddefcd649584158cf7e8fa436703943be6d4883dd1e520942db25216cc51c0e09da846ab92dd17170ecd1650101e5f54df802d56b3ca82dc919de3329cb2205556fac47259879b5979d60d834052550b80b685b84c46b860db6b5286da556b41d4486af8e15c3a91e2a79be48f3e3e6bdf9ad3ac9a449b71c47f347c570eaaf8b51afd8be30af697d1bc201da32141e4b476f0cb97be240cfee7085dfe737617cf1c4cd3c3b89150a738528c1d256bac1f56c4a4764931d747590ddfc3bb5a0ecd63081bf4036a46760fc0e676fac896f971c118cbe52114dafcb588c878095f375329e3ac060e5a942af904b7c91f4a642e9fb50bf5c0e4fca133a5fe14e1e482904fb04c4f704b0c7102227779aee645430e0d644881d8f7b911a02a9b5715da2466272a8bfe69b90f131d1683e2bf3d0ea445a46b2bf304331a5e1146fcf7ed07be54a1e55e1c8624d7140bce9ca690607eeaf75bf9891932471fd693cda60fb1314d9c4fdb1a15a90b97c1d48b96bbb097ff5c42247c47a188be7e26e36515f6ecfedf53ffd1795d890c90b2e9124a3f0c1a57197066ed21c83e2b4c7ae756e13013bbeb517cee077e43a277b3513dac73e489daa87998a18bdbacf848a61cf617a74600bdbe82221a66e230770e0705e59448b762563dc8d3466b7aa51ef9f8671039dddf2eb2a09990ae65b5c9c8060bff78339c8f0d2091108b65a9b9564d398e8ad3c7df8c020a7849f135c6ab9ef556147c133f2179f7d3164eea8738ef07030e6eab23c185b8dc541b55c8ba7bc0f9d2122dbfa7f7769b3b48ef0a83b531a0e078c9d4e9eef1ba807c2bf32c02c3feed5eb05abb0fae779370c17a965dc4136e0de8f1711475af236bceb37b97ef0233bde308cc67c0d8e982b5283e015c29dc735a334a5df299dcde7bc3e6434da0c9622f906e5c9026bfb0073f0d0fb266a2f273e93cfaa508908157fa9edc997c59734b2de8418e59990db9879aa8a55540c36c8a2033861a1aeb632740f0a3b1ebe172813db69e71758c292c280491c89f3f4f34125de67768ac5f5a95e9c4fece5de9de15bbfe9704257d84e515d9cfb8098344c85facaf36f612c8101bf1afd8bbaa0e389ae1cd33a4000329b3b9e95a7fc3894fe2606dcddfe5e4f9f908d3e830828520760e80545e7a8c1be45e6dffe16dc1eaa0fc2e655b925438226b3c96a15dc5751d94f0ce6260ae837bb20f4e5ea9bcccbd3225f0415706bda46a295bf0e6e0aa83b4a04a7a80a9d7e1bf1a8e31279d18e085d65ccc42f337e246009508665f6764bc04e0d9d569caa497ee85287eb5b546709bf55b57979f8cf9aac29c7c8d1c841a7c9c5e2767acd02936cc358d60d6f4d94f2e25a4743831a701976540b32ca9f10441fe50791e2def8204eab3ebdfc7c32f245e9f736b351fe9e210a53c56db9b11c3e294b53cc5fd80e920dad8e594ffa00fb776bb3159f963a960831ce5533b58a77e9d2fbf27c237b095792c315201c3feaab208090f4801a1bdd500522229cbe773fededc600941b0c85e3525b906bde60927429226e4d7a19c707be17bb187930f14e9a171b1f50f5d80eac77f95dee204290c4c79d1c68b619dcb36c3914974dbc98ff6c5a879970714a766635f08bb9f423b2498db922cbcf1ce948e7cc11e4bd6c5a8698327795fdc504d591e3d800bcc016b8da3854d368239c563be040cb6d5edf5649f68b7aa8eeda191333de86a12a2fe9bd35cf4b03e5ac896cdc3d2e44ee276945b8475f2998a101e43cee2bcc136bc6bcdb8e4347b22486fee83e02c9dac831e9cc2dc56fae237fce42c921bdd3391d64257f3354dc31973ed99aec83f1063d7af3a2715eba44f6b6d55430aa6de1f62d9ae192217b7e3d0c4764f28d7db0d9ad8e841f0f1e75e3999927846cd93c8a15fd89f9aa673f024510be2648e0d576cf69ce124e038da8e2ae77ea6d72504922089b0ba6cb884a94dc982e30753bf06632c454febecae96305e2859bfc289ff9891aa1a8c341d74e4b466362b5e208305da739a7ddb6f91bce11cb1a00ee713a519c8d624526de149ed9fe1ba507d1d9cf1e3f6f24ef7f889af4563bd9392608dfb589d8a387155327eb76914ea84beb6618e1b4d563a4d6d298f14d786c4bc94f18ddb5100eecd2223a7b8268bdb545a53e063ea3068b90be3df38c43c387cc85e5f58e416675178808aba828904bb0d0e8c819524b8f3c31bbe523d78420bd8469f67c8174d4170ae549484c40c0ee4de99cc0df67ea7ffe9d4ee9c43112c83bbf8e72d47c3f94a5d740cfc0959c62149f87a738b08efc460c35920c06751cf9ffd6441c68b16e6d2651cd5964dc7c9d01f2ae79d0b866c4c7335eb1162080804e91a4f3e0fd76218d226389c2393414959084fb2ee2431cbbe8d78bd85045aa677e4155f56201950f0319a417f9808b47749c1ecd202bf2cf1c8ed06ca4fe4285281c229118941fd8b0ef2b4583ad925026c44f09cd05eee1dfaa438826050e31d7feae2e5b60f8c7565da7fef48e40d506a2b9f5a0d0aa32e74ba91197ed9a78a639db09427bd1799b425b9a0d8e57f09ed4685a89a8e60eb9d5d8125d71801bfcbdb5dbb85b696ff0c35b30c9e904e3939f2d936900f536b15ca4030d9c6c91315ee56666c2adf15719b1f61adef5f11f2c96444a826dd7852408ee09c1d157e463e8cfff5897328026a8497168bf6b5e9089032f96b2add0bfaf5f82675e3f336e1cb6dd0fcbc744b10f8ab3af049f4db02ae77a969da5f9fba013d836be0e4ff7c40d63f2f142f4d9bd02a7ba13bcb581cf0ed810797f7c8569ed3a022b96fe302469520cb420ff91cad0d2d7b2a783d6e70c042e769574bd17cb3f1cb843f8ea062658085c4244959c5bb883ac47d9b5a5973a2982c3d1574c1939461ade475bc9980a3faaa84e8c538afb670bc9e7cb195a81dd6037a5648b8192ed33d1d9326b7dbda1846c9ff87e23fdc39a61d0c2216ab28ae45aad793fa70a1901d298a3ae0a759b3b70c91a1a6948b2da72dfd46570f71500917daaed49c290c4eb8f50931b5bc29b197fbdc444aedaba997146af680c31147c6657bad8f705d2b5e7d0156d2a2a8c0be61d00603dd050faf012c60726db9d0ab108e22252ff5e8302123c6a7c106dee75ba913c75fcc645b578b84309b9ff26d4f0d0221f91b9fa00c1ea806d4536db4cc5fa3659d7141e456810dcc026c3f77fa0a7eb515316444c77c7d48225ab9908fe7f40ff43b258c8e408f86974c43529d07deca162fb2a893fbb0798cf3885dd756f45a9c49d9f6a6628e9b40d0ec7372ef8f8793dfc23e60a6c31ee91b61126d0aa1f2f353d6aa6184c28739c936406e38094290bf572507ee07ccbab424ab8556824254afe187552994eeb1fce22cc723ba256d33b70bcaadda7ecd88e9be3d934fac81a8153cfe7bb1cb441d144ef47c011c62ef6a757371257c36591154fb19884b20be9664505737e7e1f613d589a101e0caa718249e5792cd9d4dce42472fefcf148f07dbfa85676ece9f7f3027ea89b0e4744baa99e48b7ab90ec8f5d7d3a418acf0d089a99d51a172fe3079aec157cadb806577c621efdec8bfe18a87f2b6b8a55e253f4776f327b2fdba594b9125787bd51f2509cf17ceb6ab7b90ed6d315a6b52fb0bc583e9328124ea51b3762a957d55b8bdf9ecf7ae6782dfe58f1ffcbc02bd5700acd16605065372ace3e9be93be7792644bc4ea430dfeed7f9933f4927d553cf3806161aa64e6f2392047ea16a402945644eeaa38e85c80cbf1ffd271952ad134bc5f56f854d0024007f5ad7d80bec5a962b5578ce48ae714d5d6bcde56090c7697891c4e2b7c04e8e7f58929dc3de8219f31fe909a9903a5772f368c0e72d4166af567041da765a8f01bcc18db6347fde42b3b23977f367a0c6c34765b8e0c5f148f644f8c00d52e7084631476d84f4e8aff6ff44a32bd9249b5c535d0ea3066a427945c97996bf118a918e5ae8e8f47620e1db52d90e416035f588545df3176b18effb26ea818cb9df08f2a750bf2082a6e89be85efd8b6b057dcc806bf3a0f3e06b8fa1ba6f9d9f00ed511ed67021f7c2a198960bfe40294d8f9b3cee30421a5da4b828f50508a8778fd0ac12ffdcfef30dbee9ded44c99014a186607df83ab9d38aeb08d4d0f3ba80876550586932db807d3f14b6e3704aa8e8a1d05669272e253d90551bcb554cdf184d9dae2e14659e56d7034f27893f6938ded9bdc53d4b341fb08c7dc5cac83154a3bfc67d9fc44574358c0766a23c3fc74dc1f19f457995f78040acce2af70e889765c5037fd13a0c9aa89d55d147f8d083d20c3c9fa5c1e751ea5d0746334a9690dce80fcfbe37f531a966dbb22108792c75b66a89cdc97cec54adc10c008c0f3cfa908aca5a3d08b8c0369df09f42093c1b45949ca57b10fbbdb66887780822b8486b3700302ee581bafc3081cca6c67b7013a74a957051cc861a192f93ba507588ed090ef0bca8012d0be13ef8b8d2695dbd3bc353d9635c12873ef840baa91fdc193af126b182f16ee8ba5f12b73d8923a7591504418683938663c65a093ba71963bbb4ec18684a8e429b6589407195a2daa2af75c648babef58847d02980dce06d140a2cf66c080d0d48b6ca9ba2eace91fb3aff1a3ec9068f476d98eabd470c879a02fad022db0a27c0a300b3ecdfa0723c9a08ee893716ad863cc6d122acc1bb2edcd1a45182eaed037f7669d6a502b1fe79c4263b13d90e0fccceed215590bcb44eb409ed146b8a27ce7834036acb06f09f5abe8c94b996640e7403567f146a931e9c156f5a2e7a48b13d3e3df2a279d2db27c58a7c1a25ee492be48c7509ff5b0a58b3257f5d6a301c8eeb409554ba64ba9cef6e16a946d67e2e88e3477550c56531dd97e94cea3eef4f1d82b0de162879f8deab9d9868c1aa6de8c92bf126c6d6401ecbe7437789f89f53bc0a8b1d85618e379af79adfcd22dd874a33c59faa91df50b4e6a802bf185c72afe159d9a7cdddb6e275dddd0003375101f34338c4d6ba7d5a5280e9ff9216818b8e9e75afc827386077f7d67d0c8319008a8dcf86a1395ec68c863e37c5a6feaffb6a87f87910f155deffb0b8ccb0cb0d966b7f50c2bf395bc81a3fb14b0c953be246", 0x1000}], 0x1, 0x100000001, 0x0, 0x6437, 0x4, 0x6, 0x2, 0x7}) (async) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000001c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) readahead(r4, 0x2, 0xd5ac) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) (async) setsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000280)="4890131cf634e2f6d81051a411012c748828d3d49f792c1e7731a99d283a26df84bef7a4a82f4d473676c138c5ff8d09ec6ae041d854a0b471b6f771d5cb1c151759a7dd60659ac9ea8e513463393e98705b4691ea51015da71cb3efc844f8942b751d3738c8027b1ec6dbb0f0a8f00062fd6a43adc76de7fbffd305918cfa94cacd7e60a8505d973d13bb75db249a9c4dc8184100edd8e3b0599b5128a4f259299be18f82efba923b064cf4aea2642f7efc", 0xb2) (async) 2m33.486521053s ago: executing program 4 (id=203): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(0x0, 0x0) (async) symlink(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) gettid() (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800ce0000000000000000000000000085002000430000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x3, '\x00', 0x0, 0x38}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x1) (async) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x10001) write(r4, 0x0, 0x0) (async) write(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000b00000000000000fd7fffffa42a0000200000009500000000000000cbc9347d33ee7ad6aed5b6db3e19b2f2d8ffb51e010a5827af979ce4f30588500d585dd477a715a41a2a6cf6697e6b351418e9b59dcd7ac3012cf487c61dfca94dd2751da6110934ead891ca89b4a12ad981ba5038131cec05189b820f766e62258a4867693f20ee65f0e0ab4c39dfb549ac70400201a1a2965e0bc52f8cf755211045659729deff1bbf8393e0e265fa92609c58c8a4d02ee957531e47d72dfe79f925aea092c895ecf36bb91b8729e7b0efbbb065ee33145bc37bad0e173ac4fb7bbbae"], 0x0, 0x1009, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private0, 0x0}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) 2m33.39040376s ago: executing program 4 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b00)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x20000000, 0x33}, @in=@rand_addr=0x64010100, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x80000000, 0x3, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x10000000, 0x8000, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x24, 0x80000000}]}, 0x100}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b00)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x20000000, 0x33}, @in=@rand_addr=0x64010100, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x80000000, 0x3, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x10000000, 0x8000, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x24, 0x80000000}]}, 0x100}}, 0x0) pipe2$watch_queue(&(0x7f0000000340), 0x80) (async) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000580)={@ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000006c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@enum={0xc, 0x8, 0x0, 0x6, 0x4, [{0xc, 0x9}, {0x1000a, 0x9}, {0xd, 0x3}, {0xfffffffe, 0xa9}, {0x8, 0xf}, {0x3, 0xfffffff2}, {0x10, 0x10000}, {0x4, 0x7}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x2, [{0x2, 0x1, 0xffffffb4}, {0x4, 0x4, 0x7}, {0x80f, 0x4, 0xd}, {0x0, 0x2, 0x1}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000780)=""/102, 0xb0, 0x66, 0x1, 0x2, 0x10000, @value=r1}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x2, 0x2, 0x1, 0x8, r1, 0x9, '\x00', r2, r3, 0x5, 0x5, 0x405, 0xc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000005c0)=""/249, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r10, &(0x7f0000005c80)="a9", 0x1, 0xc00000) write$tun(r10, &(0x7f0000020940)={@void, @void, @llc={@llc={0xbc, 0x1, "a8"}}}, 0x3) fallocate(r9, 0x8, 0x4000, 0xc000) close(r8) (async) close(r8) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r12}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7fff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xd84}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4101fed}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0xc99, 0x2, [0x4d, 0x1, 0xc550, 0x1, 0xb428, 0x4, 0xffffffff]}, {0x6, 0x9, 0x6, [0x3, 0xfffffff8, 0x7, 0xc, 0x6, 0xe1d6, 0x401, 0x6]}]}) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) 2m18.295472624s ago: executing program 32 (id=208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b00)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x20000000, 0x33}, @in=@rand_addr=0x64010100, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x80000000, 0x3, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x10000000, 0x8000, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x24, 0x80000000}]}, 0x100}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001b00)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x20000000, 0x33}, @in=@rand_addr=0x64010100, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x80000000, 0x3, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x10000000, 0x8000, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x24, 0x80000000}]}, 0x100}}, 0x0) pipe2$watch_queue(&(0x7f0000000340), 0x80) (async) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000580)={@ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000006c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@enum={0xc, 0x8, 0x0, 0x6, 0x4, [{0xc, 0x9}, {0x1000a, 0x9}, {0xd, 0x3}, {0xfffffffe, 0xa9}, {0x8, 0xf}, {0x3, 0xfffffff2}, {0x10, 0x10000}, {0x4, 0x7}]}, @func={0x8, 0x0, 0x0, 0xc, 0x2}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x2, [{0x2, 0x1, 0xffffffb4}, {0x4, 0x4, 0x7}, {0x80f, 0x4, 0xd}, {0x0, 0x2, 0x1}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000780)=""/102, 0xb0, 0x66, 0x1, 0x2, 0x10000, @value=r1}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x2, 0x2, 0x1, 0x8, r1, 0x9, '\x00', r2, r3, 0x5, 0x5, 0x405, 0xc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000005c0)=""/249, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r10, &(0x7f0000005c80)="a9", 0x1, 0xc00000) write$tun(r10, &(0x7f0000020940)={@void, @void, @llc={@llc={0xbc, 0x1, "a8"}}}, 0x3) fallocate(r9, 0x8, 0x4000, 0xc000) close(r8) (async) close(r8) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r12}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7fff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xd84}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x4101fed}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0xc99, 0x2, [0x4d, 0x1, 0xc550, 0x1, 0xb428, 0x4, 0xffffffff]}, {0x6, 0x9, 0x6, [0x3, 0xfffffff8, 0x7, 0xc, 0x6, 0xe1d6, 0x401, 0x6]}]}) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) 5.845668389s ago: executing program 3 (id=933): r0 = socket(0x2b, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000001500)={'sit0\x00', 0x0, 0x70f, 0x1, 0x3, 0x6, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast1, @private=0xa010102}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b700000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018640000060000000000000007000000185600000700000000000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r2, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x400007) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000040), 0xff, 0x57b, &(0x7f0000000380)="$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") unshare(0x22020600) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x0, @any, 0x6, 0x2}, 0xe) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400000000000000050000f500", @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e000300000003000000050017"], 0x50}}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r6, 0xc0805841, &(0x7f0000000080)={0x7fff, 0x9, 0x0, 0x3, 0x8}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.408829589s ago: executing program 3 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002fc0)=@newchain={0x278, 0x64, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0xffe0, 0x2}, {0xe, 0xb}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xa}}]}}, @f_tcindex={{0xc}, {0xb0, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x31f0}, @TCA_TCINDEX_MASK={0x6}, @TCA_TCINDEX_ACT={0x9c, 0x7, [@m_skbedit={0x98, 0x0, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x50}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x4, 0x8, 0x6, 0x42b68165}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf319, 0x0, 0xf2ec1842c81a2ba0, 0x8, 0x80000000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}]}}, @f_rsvp6={{0xa}, {0x16c, 0x2, [@TCA_RSVP_ACT={0x168, 0x6, [@m_sample={0xf4, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0xbd, 0x6, "c19077888651f1ec271a23e7a2762fd30215dcecfaab250e40375be2ef0eaa6726498d8d8b564e2b12821cb12cbdb7f11b3d77a135c3c818526c7830aa6e9f45e58b52f804dbda2423e108afb7e5ca1077e1a7ea941e857df4d2cf00b823de039a2b63248fb87d792e7dab9d7ca5f075f0d954d99b500d36c5d21d3dc819c090b6c19be95133e79177f01d58672851ab98fa7dad23115e94b222f490b5850f65d517a6172044e661f60f80ef3ec276c721115bc69bfe96202e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x70, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xc35, 0x0, 0x4, 0x96}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x44, 0x1, 0x5, 0x1, 0x2}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x2000004}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000780)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)={0x5dc, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x258, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x21, 0x5, "cbea4bc52f997e4413d5bd5593615dd6eb5d705f0a65da16553b9f1d28"}, @ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "3ede20f7edf952cac1c7b8e4a42225865426e0d9c1eb659211c5047d2b37fb2ac7a5eb7421583779"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "9af81701a08cd73177c44e46381f71a10332b9a7d4f2b5b785acaf702b2e8ef27db60c5ab25c0747f2262e73d94fa25267f8620b7c1302b8313f5e36f548d1acd40eff8a892d9f85ddd9a1ea8bcc785ebca7ae56ff04c62324372b438987c804e8c446a7e864ad869bb50bce6dad7d8e1ea254e71bb75c207648d05934efe4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "7834eb4f6d"}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-^(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '*\\$!(/^-.@$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#((.@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "af34f167e1089bf0cda0c663bdd5cac0d04a91986aa743f1bd22aac26e27f31448aadbaaf770b25e7a69f5e28d06782d2b853752d9df4957cbfa417b6c893e67636b16ac1eba2cfc0079bd5684c2b419588a2abfa2a792e4ac68345763b2a148af05005760ae39b5efe58736164ca432f84d4dfd9f0078d98ade05f76653d2dfb62f1ab5840d1f0cb2f3a2be9284f1938f41e880a419e53ed175af40f94954cfc5ae5c96383680d172c28f0476f78752f91401c520a31ecf382ca50232288a73a3f106f57615b43fb577ce2049795ff2e2b8c5853123be1444da80ac51ba5b4fb6e1dcb030e87ffb1b6fbaf379b49da4"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "bdb34b31174386996d60a2d9719e3b251bb6b8ddcb3ff56d10d9820ccea97574b919745a766f4176c0265c25fafd18d506c9b5191a42bb832b4c49d8abc086e608e54638b78c617b7f2386b4575655846e1af16618084ef6e3247d76d4aa5779c21da8e6eb459b13b287a68f572a53519905ea4e56537e73add4efccdc09d7013f9236c3ec0252813de2f0425c79ffd43bf30bf35e7c1ff2259e0b6cc9112b278e0e0091a7d0ee6ec1e7fc12244d2f9dae389d797e162a4afbe397348b00682804a4bfd98d797eda71984a67feb61091afabe55747f7e2eba192b88e99555ffa6ff66b32a361c0a391b21535144c93"}, @ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "513c83f2fb9ee705d07ef5c751b6de7729186aeb7a27c0aa0936cd0572699890bdda25c2c42ff845dae46d483f0a7d6dadfa37806bc588082f5fd935c19e6a739a3bcd3c1a9c236ed517d09e3edc00bc290b349add203511af0918d80383caddfa9e349ebe9c0deedce5340bd421e2154cf9b5d8ebc06d447471ba3697e768b636d7337e5acb984d79d416bfc0f8ff97002f296a1e874d4745ffba8f460b64ee723aa45a1d2b480e56bb7a41c4327357c992cc10dfcb086d43cf81ac50c21aea32fbae10687ae0be8c81870061d9e629841782aaaa1d4d2471889f3e5048f2d1dac77c7a711123f2"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x178, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "405eac0d129c3d67d19d342df906355a4fea7c53a9d4f82d8e9cea6c17168a5328548e8b70f97673e9a489553a503c37e19c85181609ea09f7076593e226db846329b9192057368775a1b5fad7017acb6ac90936134faed8c902a6cf8041ef3d7739baeb93649fead4789e468199d3021d566d3e184be112e061fb0a8fa066caf33dade6a25204a975d42a64fe25bc901fced46ee7cafd5dbae248f37ddbe5391377ea465073a0b14046401a71f6f4459ca09b80d3fd878679459d37"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "24f0fa0374049d50eba107396435cae5c36bc2874e56d2fcb63e8dcee2d60155516d23004d17d49f9e70f0a5e9449dd89d0f26525b9f465a4a9a59ec9abcac6059dd5ba591f471e99fd9f38a84ae1b9f3c834a86c506f54fffa879d076da17a6143858b036a47e3d161676cf020bddd9c4254e979e2ba14c919d4408b092f12b998cb3fd410d2219d584979efaa724deef4d614a1ec74e04"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x5dc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, 0x0, 0x1e) 3.439221544s ago: executing program 3 (id=946): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000300)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r6, &(0x7f0000000380)=""/185, 0xb9) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x130, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) syz_usb_connect$uac1(0x1, 0xdb, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x5, 0x20, 0xd2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x342b, 0x39}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0xc}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x0, 0x8], 0x60}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0xce}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xff}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x10, "a28972f5e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x7, 0x8, 'wO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x10, 0xf9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe6, 0x9, 0x2, "3341d8228df650"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7, 0xd, "dcc2d1b1331f036c"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xc5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x6, 0x3, 0xfa, 0xff, 0x80}, 0x103, &(0x7f0000000740)={0x5, 0xf, 0x103, 0x2, [@generic={0x6f, 0x10, 0xa, "83b726df289295e59e5ba65b943e86d9c0d9973c693364891ab566cd52d5aabe1d1705c7101b2f97cd7bb1a1b2673baa14cf9e6019199f8cee5491bbef4180bf124f0b460144d3380da4212726ab6d1160de9d8039f5b76124c8df6d30a95e02fad181abaf3454c9e913ef72"}, @generic={0x8f, 0x10, 0x2, "b6c0e23e01f3c07b7946805225d89bc2ed0431c2a1ea51152298fa4bce498abdff405fc3e382f702c94832c93c35a85dc6a527ad35f8b48620573e417479a71e71c55f2ecbe5b0829fd72d6d80179b907230c59f4a1b8bdd5c1b892c752ba01e260c713d5aa320a71543b6ff4aa4bcc8a495d674fe75339cfb1fd2b8dcb2cee132bbbee1788793304e79fe60"}]}, 0x1, [{0x72, &(0x7f0000000640)=@string={0x72, 0x3, "a9a5b18ac25a06718aeb3a61e1eb0afe391d8a1ac2be6f93dc26bac202e38f3752774804529df048efde183f9f2843957bf10d88c093c9026b0af4aaf73a4f0888186be93fe5abf77d747dc4dc842e3d7595abb576ca8c640eb3160ec034ea880fb91c53e5fcb98f2de23dd86284d419"}}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) 3.368420139s ago: executing program 1 (id=950): r0 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10000, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc09b, 0x0, @perf_config_ext={0x288}, 0x2236, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000400000000000000400000f7400044d97934e4a17c0d547d6d4511a81000", @ANYRES8=r0, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'syz_tun\x00', {0x4}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r6, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000140)="1b54c4060df980c0b5a7f68e0ccb6f83ee370fd5368e07dd23e7b6bf8b30f559478b2bdc9914ade3f90d56b8196dacf5b9cf9f8ebbba6cef410977b3aa", 0x3d}], 0x1, 0x0, 0x0, 0x4000083}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = gettid() rt_sigqueueinfo(r9, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) geteuid() sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r11, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000100)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="b12aaae22534f95eb2bb3f0bb72408a1ee0ec76588116093afb4de23986e9f171ec94417d3fe6c8335c9c6b025978659d133a5071f891d8edfae0dc934e031c90caba4e04779deb3ffda9c38cc83f8745c22faaf4ce4990520550aa75e0d6d41dcd28e9a7805a2f6d2762248c16677b161ad4307330955a07922858eae017960e49896321dcefb3a58c98909", &(0x7f0000000180), 0x1003, r2}, 0x38) r12 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r12, 0x0, 0x0) 3.094944978s ago: executing program 1 (id=954): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200"], 0x50) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) preadv(r1, &(0x7f0000000180), 0x0, 0x0, 0x8800) sync() r2 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r5, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001c00)=""/4106, 0x100a}, {&(0x7f0000000d00)=""/63, 0x3f}, {&(0x7f0000000340)=""/259, 0x103}, {&(0x7f00000000c0)=""/251, 0xfb}, {&(0x7f0000000000)=""/109, 0x6d}, {&(0x7f0000000c80)=""/88, 0x58}, {&(0x7f0000001740)=""/254, 0xfe}, {&(0x7f0000001840)=""/224, 0xe0}], 0x8}, 0x6}], 0x1, 0x10102, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x1008000, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 3.031133012s ago: executing program 5 (id=955): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1280e1, 0x0) stat(&(0x7f0000000180)='.\x02\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='.\x02\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000100)='.\x02\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x2}, [], {0x4, 0x6}, [{0x8, 0x2}, {0x8, 0x2, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}], {0x10, 0x1}, {0x20, 0x4}}, 0x44, 0x0) 2.747575071s ago: executing program 5 (id=959): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x7c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x63}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0x2}}, @TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0x3}}]}}}]}, 0x7c}}, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000440)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x4, @f={0x6, 0x3, 0x5, 0x2, 0x20, 0x5, 0x1, {0xa5}, 0x3, 0x0, 0x2, 0x4}}, 0x11) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2.338625119s ago: executing program 5 (id=961): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x4003, 0x40}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7b1}}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x6, 0xe0000000, 0x5, 0x77, 0xffffffffffffffff}) migrate_pages(r1, 0x6, &(0x7f0000000100)=0xffffffff, &(0x7f0000000140)=0x2b) (async) migrate_pages(r1, 0x6, &(0x7f0000000100)=0xffffffff, &(0x7f0000000140)=0x2b) 2.128200954s ago: executing program 5 (id=966): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c32480400", 0x24}, {&(0x7f0000000240)="b00c7037e07686acd2c8dd812560e8ae4712639dbc23", 0x16}, {&(0x7f0000000080)="f73a29ec71c25b63d51825c6fc", 0xd}], 0x3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r9, 0x0, &(0x7f0000000200), 0x800) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r7}, @CGW_SRC_IF={0x8, 0x9, r8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r10}]}, 0x44}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) write(r12, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESHEX=r0], &(0x7f0000000280)='GPL\x00', 0x5, 0xde, &(0x7f00000002c0)=""/222, 0x41000, 0x0, '\x00', 0x0, 0x25, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) 2.126613834s ago: executing program 1 (id=967): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1004, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.994858053s ago: executing program 3 (id=968): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000400ff000080"], 0x30}, 0x8050) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000800) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0xfffff, 0x18d}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b8, &(0x7f0000000500)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000000)=""/48, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0x2, 0x722}, 0x106200, 0x10004, 0x20da, 0x6, 0x7, 0x10020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x200000, 0x2, 0x0, 0xb, 0x508}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) accept4$unix(r9, 0x0, &(0x7f0000000000), 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000d042abd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="21800000000000002c00128009000100626f6e64000000001c00028008001c000008000005000600010000000500010005"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.939808916s ago: executing program 0 (id=969): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='-', 0x1}], 0x1}}], 0x1, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.623972268s ago: executing program 0 (id=970): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x42, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0x110, 0xffffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xe8, 0x110, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x8, 0x40, 0xd}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'wg1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x8, 0x0, 0x4}, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], [0x2d7b, 0x7, 0x4, 0x4, 0xdf4, 0x6, 0xfffffffd, 0xff, 0x6, 0x8, 0x1, 0x8, 0x3, 0xa, 0x1000, 0x6, 0xe, 0xb289, 0x1e, 0x401, 0x2, 0x3, 0x6, 0x60000000, 0x4, 0x0, 0x400, 0x1, 0xfffffff9, 0x10001, 0x0, 0x617, 0x4, 0x7, 0x2, 0x1, 0x7, 0x2, 0x7, 0x1, 0x5, 0x9, 0xd, 0x6, 0x3, 0x0, 0x826, 0x7, 0x2, 0x5, 0x1616, 0x42212, 0x0, 0x2, 0x401, 0x7fff, 0x1266, 0x12, 0x438d46f9, 0x2, 0x3, 0xfff, 0x1c54, 0x32e4], 0x2, [{0x6, 0x9, 0x41}, {0x1, 0x9, 0x65}, {0xfc, 0x8, 0x40}, {0x81, 0x0, 0x48}], 0x0, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x0, [0x3, 0x1, 0x3a, 0x8, 0x12, 0x9, 0x2d, 0x3b, 0x15, 0x2a, 0x31, 0x3b, 0xc, 0x1, 0x1f, 0x28], 0x1, 0x9, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0xe4, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_VENDOR_DATA={0xae, 0x1f, "8d988ee38377f19ef0324dcc001ae687de68f43858c33576bca7ba23230d8c8f10e8cac7a8dce87fb37a796fc697f8428329ba9cb7290b29cf9cebd60d0abccc6884b28a6cb457af7520893ee84ea9ba4abbdffe2e2103366da3ecc99a192effe090ab33d36ef6eb4d062559dbd87f242094f9f06990299a787f2c83deab0acbc75f4f958ba355414d49720787dd0eff838d331342c505080e4166903a340fb1b8f520c5fc7e7bc25c87"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c001) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = fcntl$dupfd(r6, 0x406, r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x220080, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, r8, 0x4}, 0x38) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TCPDIAG_GETSOCK(r7, 0x0, 0xc4) write$binfmt_elf64(r7, &(0x7f0000000f80)=ANY=[], 0x540) socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000600)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000094e58441364b40219d392d112e05bbdc6b454ef80be9b7880895fbdfb2c95fac5a0eeb63c4d9ef06dd9649bc4f081a647bec54964dfdf17abf13558c74decabd4344e8b5708bbb96067f45ead99085b2d48c3ac532052ffc9fdf6f1927483f1e22609c4a344e039dd97b2cc666705e81b69c3b580a72000bbf53ca69b382bc3ec7cef03699e0c331d0cfc67bc88d3b4b8a700befa0a21624fc8655b63963d2c2406aeeefc40a85", 0xe0}], 0x1000000000000079) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) 1.359046676s ago: executing program 2 (id=971): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) close(0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x4) mremap(&(0x7f0000be4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00005f0000/0x2000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.355551557s ago: executing program 2 (id=972): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000001114010326bd7000fbdbdf2508003e0004080000080001000000000008004f0001000000080003000000000008004f0004000000080003000200000008004b"], 0x60}, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) 1.281620602s ago: executing program 2 (id=973): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1000000}, 0x8000) 1.229778435s ago: executing program 3 (id=974): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(0x0, 0xc00, 0x2080) ioctl$BLKCRYPTOPREPAREKEY(r3, 0xc040128b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3, 0x2b0, &(0x7f0000000280)="$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") r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) 1.01849916s ago: executing program 2 (id=975): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x29, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={0x0, 0x29, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11c, 0x23, 0x0, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x11c, 0x23, 0x0, 0x0) r5 = syz_clone3(&(0x7f0000001e80)={0x1e6102400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x4e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYRES8=r4, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=r4], 0x38}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f00000000c0)={@loopback, 0x24, r8}) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000080), 0x10) sendmmsg(r10, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) sendmmsg(r10, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$XFS_IOC_GOINGDOWN(r10, 0x8004587d, &(0x7f00000005c0)=0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0x1, &(0x7f00000004c0)="3b7978fc21ae27093235f9b9dc2fc1cf96bf43b2f5f405135bea2f05e83d736f87922638d8cbe051818d676c4fb79f41801f28ca933ef755da0814f17d7f3f29e02311a093272b6ceb3482b4322d22df1b1143f2110c8157fdad2277eee2eaa3e5b3e94ecda4596f1ad5005993a79a7134", &(0x7f0000000540)=""/37}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000001480)=ANY=[@ANYBLOB="18050000", @ANYRES16=r11, @ANYBLOB="000327bd7000fedbdf2505000000050007000200000005000600090000002c000180080003000200000008000100", @ANYRES32=r3, @ANYBLOB="09040100", @ANYRES32=r3, @ANYBLOB="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"], 0x518}, 0x1, 0x0, 0x0, 0x44000}, 0x40044) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000001480)=ANY=[@ANYBLOB="18050000", @ANYRES16=r11, @ANYBLOB="000327bd7000fedbdf2505000000050007000200000005000600090000002c000180080003000200000008000100", @ANYRES32=r3, @ANYBLOB="09040100", @ANYRES32=r3, @ANYBLOB="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"], 0x518}, 0x1, 0x0, 0x0, 0x44000}, 0x40044) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="14fdaab0eccb81b24c26e843efe57978a9ea000000000000009362232fc33ea9d2d6d8b076fdfb98899b2b84500fc387719c3c77631b7a5d8453a5e358dd198244", @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000000073797a3100"/98], 0x6e}}, 0x8080) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="14fdaab0eccb81b24c26e843efe57978a9ea000000000000009362232fc33ea9d2d6d8b076fdfb98899b2b84500fc387719c3c77631b7a5d8453a5e358dd198244", @ANYRES16=r13, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000000073797a3100"/98], 0x6e}}, 0x8080) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r13, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40d1) 1.01792343s ago: executing program 1 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x42}, 0x90) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x4000423) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r7, &(0x7f0000000380)=""/4096, 0x1000) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x20041, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7c, 0x1, @perf_bp={0x0, 0x5}, 0x103ba, 0x0, 0x0, 0x6, 0xfffffffffffffff2, 0x8001, 0x4, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) (async) r9 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) (async) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) (async) ptrace$setregs(0xd, r10, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x9, r10, 0x7ff, 0x3) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x6, @empty, 0xf}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) (async) getsockopt(r1, 0x4, 0x8, &(0x7f00000000c0)=""/138, &(0x7f0000000180)=0x8a) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000c921000010515ffffff0300000800000000", @ANYRES32=0x0, @ANYBLOB="c14d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0500060095000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 977.723713ms ago: executing program 5 (id=977): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200002, &(0x7f0000000080)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {}, {@nogrpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x572, &(0x7f0000000380)="$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") chdir(&(0x7f0000000400)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000c00)='./bus\x00', 0x2440, 0x82) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x7}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 922.698916ms ago: executing program 3 (id=978): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c42, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000300)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$packet(0x2d, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r6, &(0x7f0000000380)=""/185, 0xb9) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x130, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x342a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe33}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x31}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x21}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xac3cad7acb74c65b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) syz_open_procfs(0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) syz_usb_connect$uac1(0x1, 0xdb, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x5, 0x20, 0xd2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x342b, 0x39}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0xc}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x0, 0x8], 0x60}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x4, 0xce}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xff}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x10, "a28972f5e3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x7, 0x8, 'wO'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x10, 0xf9, {0x7, 0x25, 0x1, 0xc, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xe6, 0x9, 0x2, "3341d8228df650"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x1002}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7, 0xd, "dcc2d1b1331f036c"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x10, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xc5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x6, 0x3, 0xfa, 0xff, 0x80}, 0x103, &(0x7f0000000740)={0x5, 0xf, 0x103, 0x2, [@generic={0x6f, 0x10, 0xa, "83b726df289295e59e5ba65b943e86d9c0d9973c693364891ab566cd52d5aabe1d1705c7101b2f97cd7bb1a1b2673baa14cf9e6019199f8cee5491bbef4180bf124f0b460144d3380da4212726ab6d1160de9d8039f5b76124c8df6d30a95e02fad181abaf3454c9e913ef72"}, @generic={0x8f, 0x10, 0x2, "b6c0e23e01f3c07b7946805225d89bc2ed0431c2a1ea51152298fa4bce498abdff405fc3e382f702c94832c93c35a85dc6a527ad35f8b48620573e417479a71e71c55f2ecbe5b0829fd72d6d80179b907230c59f4a1b8bdd5c1b892c752ba01e260c713d5aa320a71543b6ff4aa4bcc8a495d674fe75339cfb1fd2b8dcb2cee132bbbee1788793304e79fe60"}]}, 0x1, [{0x72, &(0x7f0000000640)=@string={0x72, 0x3, "a9a5b18ac25a06718aeb3a61e1eb0afe391d8a1ac2be6f93dc26bac202e38f3752774804529df048efde183f9f2843957bf10d88c093c9026b0af4aaf73a4f0888186be93fe5abf77d747dc4dc842e3d7595abb576ca8c640eb3160ec034ea880fb91c53e5fcb98f2de23dd86284d419"}}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) 922.376746ms ago: executing program 1 (id=979): socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 749.530768ms ago: executing program 5 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r2, 0x0, 0x40) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x80) fchdir(r4) lseek(0xffffffffffffffff, 0x7ffffffd, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@journal_ioprio}, {@nojournal_checksum}]}, 0x1, 0x53a, &(0x7f0000002400)="$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") 710.200171ms ago: executing program 2 (id=981): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 705.054221ms ago: executing program 0 (id=982): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$kcm(0x11, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200004}, 0x1c) (async) listen(r7, 0xfffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r8) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) 550.890632ms ago: executing program 0 (id=983): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x3, 0xe}, {0x7, 0x9}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) unshare(0x28020480) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x400000000005}, {0x400000000005, 0x1fc}, 0x1, 0x6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r2, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) syz_emit_ethernet(0xbe, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800451000b0006500000301907864010101ac1414bb0304907800f7801f455307ff00641ce1d9ff0e5cac1e0001ac1414aa8602447c8901ac1414377e17b7e11b01cf010000000564000001000200057f00000100000000ac14142b00000329e000000200000005ffffffff00000d47ac14140a000000040a0101000000000cac1e000100004800e000000100000003e000000200000009ac1414bb000000017f00000100000002ac34141a000000090000"], 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20000000) 231.328913ms ago: executing program 0 (id=984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r2, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) (async) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x21, 0x3}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x50) io_uring_enter(r5, 0x202219, 0x7721, 0x19, 0x0, 0x0) (async) listen(r4, 0x0) (async) accept(r4, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x20000054) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x20040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0800000008440000380012800b00010067656e65766500002800028005000900010000001400070000000000000000000000000000140001050003000800000008000a00", @ANYRES32=r6], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 181.703817ms ago: executing program 0 (id=985): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3eb}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2800009, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}, {0x81}], 0x2, 0x1}}, @common=@unspec=@connbytes={{0x38}, {[{0x7bb}, {0x7}], 0x2, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0x80000001, 0x8363, 'netbios-ns\x00', 'syz1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_ethernet(0x1d6, &(0x7f00000005c0)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "b151eb", 0x198, 0x6, 0x1, @empty, @dev={0xfe, 0x80, '\x00', 0x36}, {[@fragment={0x3c, 0x0, 0x1, 0x0, 0x0, 0x6, 0x66}, @hopopts={0x6, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}, @fragment={0x16, 0x0, 0x4, 0x1, 0x0, 0x4, 0x67}, @srh={0x11, 0x6, 0x4, 0x3, 0x2, 0xedf03d8420246df3, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @empty]}, @fragment={0x32, 0x0, 0x0, 0x0, 0x0, 0x10, 0x65}, @dstopts={0x2, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @hopopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3c}}]}], @name_distributor={{0x108, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x0, 0x0, 0x0, 0xfe7, 0x800, 0x4, 0x4e21, 0x4e23, 0x1, 0x1, 0x0, 0x0, 0x1}, [{0x10, 0x2, 0xb0, 0x48, 0x3, 0x100, 0x7, 0xd71f}, {0xa, 0x5, 0xbb, 0x10, 0x21, 0x8000, 0x0, 0x7}, {0x1000, 0xf, 0xbbd, 0x10001, 0x401, 0x8, 0xd, 0x80}, {0x0, 0xd9, 0x4, 0x3ff, 0x8, 0x7, 0xe, 0x9}, {0x7, 0x8, 0xff, 0xdff, 0xff, 0x4f1, 0x3}, {0x8, 0x7, 0xffff8000, 0x6, 0x7ff, 0xd, 0xb}, {0xfffffff9, 0x1, 0x2, 0x24000, 0xffff, 0x9, 0x1, 0xc}, {0x2, 0x1, 0x1, 0x1, 0x3, 0x1, 0x9, 0x9}]}}}}}}, &(0x7f00000007c0)={0x1, 0x1, [0x7a6, 0x2a1, 0xbcb, 0x68a]}) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x1}, 0xe) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100)=r0) bind$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x1, @none}, 0xe) readv(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000000)=""/213, 0xd5}], 0x2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x101}, 0x8) 160.114888ms ago: executing program 2 (id=986): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r2, 0x0, 0x40) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x2b, 0x80801, 0x1) socket$kcm(0xa, 0x3, 0x3a) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x80) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@journal_ioprio}, {@nojournal_checksum}]}, 0x1, 0x53a, &(0x7f0000002400)="$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") 0s ago: executing program 1 (id=987): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1004, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): -fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.506290][ T5696] EXT4-fs (loop5): 1 truncate cleaned up [ 139.541806][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 139.541820][ T28] audit: type=1400 audit(1775498894.844:1138): avc: denied { connect } for pid=5704 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.568641][ T5696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.641379][ T5696] tap0: tun_chr_ioctl cmd 1074025677 [ 139.654458][ T5709] loop0: detected capacity change from 0 to 1024 [ 139.657531][ T5696] tap0: linktype set to 780 [ 139.665493][ T28] audit: type=1400 audit(1775498894.944:1139): avc: denied { getopt } for pid=5708 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 139.677627][ T5709] ext4: Unknown parameter 'dont_appraise' [ 139.704781][ T5696] tap0: tun_chr_ioctl cmd 2147767507 [ 139.712917][ T5709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.557'. [ 139.714148][ T5696] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #2: block 4: comm syz.5.554: lblock 0 mapped to illegal pblock 4 (length 1) [ 139.753844][ T28] audit: type=1400 audit(1775498895.014:1140): avc: denied { write } for pid=5708 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 139.765098][ T5696] EXT4-fs (loop5): Remounting filesystem read-only [ 139.823650][ T28] audit: type=1400 audit(1775498895.044:1141): avc: denied { ioctl } for pid=5708 comm="syz.0.557" path="socket:[12545]" dev="sockfs" ino=12545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 139.847065][ T5711] vhci_hcd vhci_hcd.2: GetPortErrorCount req not supported for USB 2.0 roothub [ 139.889854][ T28] audit: type=1400 audit(1775498895.044:1142): avc: denied { write } for pid=5708 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 139.913674][ T28] audit: type=1400 audit(1775498895.044:1143): avc: denied { nlmsg_write } for pid=5708 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 139.935171][ T28] audit: type=1400 audit(1775498895.144:1144): avc: denied { write } for pid=5710 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 139.954550][ T28] audit: type=1326 audit(1775498895.194:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.0.558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x0 [ 139.978596][ T5714] loop0: detected capacity change from 0 to 128 [ 139.985398][ T5714] vfat: Bad value for 'errors' [ 139.993785][ T5714] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 140.000337][ T5714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.027353][ T5714] vhci_hcd vhci_hcd.0: Device attached [ 140.256328][ T5720] loop2: detected capacity change from 0 to 8192 [ 140.282241][ T5721] loop0: detected capacity change from 0 to 512 [ 140.295876][ T5716] vhci_hcd: cannot find a urb of seqnum 4294967291 max seqnum 0 [ 140.315581][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.335340][ T4152] loop2: p1 < > p2 p4 < p5 > [ 140.381761][ T3423] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 140.399710][ T4152] loop2: partition table partially beyond EOD, truncated [ 140.409923][ T36] vhci_hcd vhci_hcd.0: stop threads [ 140.423518][ T36] vhci_hcd vhci_hcd.0: release socket [ 140.432590][ T4152] loop2: p1 start 134217728 is beyond EOD, truncated [ 140.443669][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 140.451514][ T4152] loop2: p2 size 591360 extends beyond EOD, truncated [ 140.463723][ T3423] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 140.475657][ T3423] usb 1-1: enqueue for inactive port 0 [ 140.487542][ T3423] usb 1-1: enqueue for inactive port 0 [ 140.498489][ T3423] usb 1-1: enqueue for inactive port 0 [ 140.506407][ T4152] loop2: p5 size 591360 extends beyond EOD, truncated [ 140.583590][ T3423] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 140.650913][ T5730] loop1: detected capacity change from 0 to 2048 [ 140.665298][ T5730] EXT4-fs: Ignoring removed i_version option [ 140.695468][ T5730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.728617][ T5730] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.809825][ T5730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 140.830718][ T5730] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 140.840304][ T5720] loop2: p1 < > p2 p4 < p5 > [ 140.845106][ T5720] loop2: partition table partially beyond EOD, truncated [ 140.852256][ T5720] loop2: p1 start 134217728 is beyond EOD, truncated [ 140.858981][ T5720] loop2: p2 size 591360 extends beyond EOD, truncated [ 140.866905][ T5720] loop2: p5 size 591360 extends beyond EOD, truncated [ 140.888858][ T5736] loop5: detected capacity change from 0 to 256 [ 140.896215][ T5734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.562'. [ 140.913863][ T5736] vfat: Bad value for 'utf8' [ 140.955347][ T28] audit: type=1400 audit(1775498896.264:1146): avc: denied { create } for pid=5729 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 140.976192][ T28] audit: type=1400 audit(1775498896.264:1147): avc: denied { write } for pid=5729 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 141.000194][ T5730] bond2: (slave gretap1): making interface the new active one [ 141.049667][ T5730] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 141.296183][ T5741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.564'. [ 141.465095][ T5746] bond3: entered promiscuous mode [ 141.655091][ T5750] loop2: detected capacity change from 0 to 512 [ 141.705892][ T5750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.719783][ T5750] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.263286][ T5762] loop0: detected capacity change from 0 to 136 [ 142.309779][ T5762] iso9660: Unknown parameter 'syz' [ 142.548420][ T5765] ext4: Unknown parameter 'dont_appraise' [ 142.736483][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.277799][ T5782] FAT-fs (loop1): Directory bread(block 64) failed [ 143.284417][ T5782] FAT-fs (loop1): Directory bread(block 65) failed [ 143.291090][ T5782] FAT-fs (loop1): Directory bread(block 66) failed [ 143.297663][ T5782] FAT-fs (loop1): Directory bread(block 67) failed [ 143.304219][ T5782] FAT-fs (loop1): Directory bread(block 68) failed [ 143.310841][ T5782] FAT-fs (loop1): Directory bread(block 69) failed [ 143.317396][ T5782] FAT-fs (loop1): Directory bread(block 70) failed [ 143.323981][ T5782] FAT-fs (loop1): Directory bread(block 71) failed [ 143.330591][ T5782] FAT-fs (loop1): Directory bread(block 72) failed [ 143.337276][ T5782] FAT-fs (loop1): Directory bread(block 73) failed [ 143.357470][ T5783] vfat: Bad value for 'errors' [ 143.472205][ T5783] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 143.478829][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 143.592535][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 143.763739][ T3381] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 143.843567][ T3381] usb 11-1: new full-speed USB device number 4 using vhci_hcd [ 144.159759][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.731794][ T5795] set_capacity_and_notify: 4 callbacks suppressed [ 144.731891][ T5795] loop0: detected capacity change from 0 to 512 [ 144.812566][ T5795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.826687][ T5795] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.845191][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.524573][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 145.524666][ T28] audit: type=1326 audit(1775498900.834:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 145.556115][ T5799] netlink: 'syz.2.576': attribute type 10 has an invalid length. [ 145.573693][ T5799] geneve1: entered promiscuous mode [ 145.586122][ T5799] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 145.603582][ T28] audit: type=1326 audit(1775498900.864:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 145.628291][ T5800] netlink: 'syz.2.576': attribute type 58 has an invalid length. [ 145.650096][ T4953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.663722][ T4953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.683255][ T28] audit: type=1326 audit(1775498900.864:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 145.714462][ T4953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.743414][ T4953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.770984][ T28] audit: type=1326 audit(1775498900.864:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 145.804178][ T5802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.577'. [ 145.853593][ T28] audit: type=1326 audit(1775498900.864:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 145.888194][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.933728][ T28] audit: type=1326 audit(1775498900.864:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f440ee5d04e code=0x7ffc0000 [ 145.984992][ T28] audit: type=1326 audit(1775498900.864:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 146.029688][ T5812] lo speed is unknown, defaulting to 1000 [ 146.035575][ T5787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.057276][ T5784] vhci_hcd: connection reset by peer [ 146.084569][ T28] audit: type=1326 audit(1775498900.864:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 146.133169][ T30] vhci_hcd vhci_hcd.5: stop threads [ 146.139042][ T30] vhci_hcd vhci_hcd.5: release socket [ 146.163187][ T30] vhci_hcd vhci_hcd.5: disconnect device [ 146.349616][ T1712] kworker/u8:7: attempt to access beyond end of device [ 146.349616][ T1712] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 146.383537][ T5822] loop3: detected capacity change from 0 to 1024 [ 146.513022][ T5822] ext4: Unknown parameter 'dont_appraise' [ 146.531906][ T28] audit: type=1326 audit(1775498900.864:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 146.598255][ T28] audit: type=1326 audit(1775498900.864:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5798 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f440ee9c819 code=0x7ffc0000 [ 146.955333][ T5851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.985897][ T5851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.037392][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.058519][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.069524][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.079318][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.218283][ T5856] loop1: detected capacity change from 0 to 512 [ 147.277536][ T5851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.326542][ T5856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.341457][ T5856] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.380592][ T5851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.439828][ T5851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.493287][ T5851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.563052][ T5843] Process accounting resumed [ 147.683721][ T5851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.763662][ T5851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.788192][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 147.907068][ T4953] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.923332][ T4953] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.947264][ T4953] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.959447][ T4953] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.968166][ T4953] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.976877][ T4953] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.989573][ T4953] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.022590][ T4953] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.303051][ T5878] loop2: detected capacity change from 0 to 512 [ 148.345462][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.358570][ T5878] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.381567][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.541082][ T5883] loop5: detected capacity change from 0 to 1024 [ 148.550631][ T5883] ext4: Unknown parameter 'dont_appraise' [ 148.694252][ T5891] 9p: Bad value for 'wfdno' [ 148.746186][ T5893] loop5: detected capacity change from 0 to 512 [ 148.760455][ T5889] loop3: detected capacity change from 0 to 8192 [ 148.776457][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.810989][ T5893] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.601: invalid indirect mapped block 256 (level 2) [ 148.831616][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 148.854101][ T5889] xt_l2tp: unknown flags: 10 [ 148.864062][ T5893] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 148.864496][ T5893] EXT4-fs (loop5): 2 truncates cleaned up [ 148.873714][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 148.873735][ C1] EXT4-fs (loop5): initial error at time 1775498904: ext4_free_branches:1023: inode 11 [ 148.873768][ C1] EXT4-fs (loop5): last error at time 1775498904: ext4_free_branches:1023: inode 11 [ 148.906094][ T5893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.951909][ T5903] netlink: 436 bytes leftover after parsing attributes in process `syz.2.604'. [ 148.963567][ T3381] usb 11-1: enqueue for inactive port 0 [ 148.969205][ T3381] usb 11-1: enqueue for inactive port 0 [ 148.984668][ T5903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'. [ 149.013597][ T5903] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.031476][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.065856][ T3381] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 149.239127][ T5906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.277604][ T5920] loop1: detected capacity change from 0 to 256 [ 149.430260][ T5920] FAT-fs (loop1): Directory bread(block 64) failed [ 149.462183][ T5920] FAT-fs (loop1): Directory bread(block 65) failed [ 149.479813][ T5920] FAT-fs (loop1): Directory bread(block 66) failed [ 149.523121][ T5920] FAT-fs (loop1): Directory bread(block 67) failed [ 149.530197][ T5920] FAT-fs (loop1): Directory bread(block 68) failed [ 149.631962][ T5920] FAT-fs (loop1): Directory bread(block 69) failed [ 149.660526][ T5920] FAT-fs (loop1): Directory bread(block 70) failed [ 149.707988][ T5920] FAT-fs (loop1): Directory bread(block 71) failed [ 149.741284][ T5920] FAT-fs (loop1): Directory bread(block 72) failed [ 149.766039][ T5920] FAT-fs (loop1): Directory bread(block 73) failed [ 149.831451][ T5933] loop3: detected capacity change from 0 to 1024 [ 149.841491][ T5933] ext4: Unknown parameter 'dont_appraise' [ 149.884112][ T5933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 149.896742][ T5937] capability: warning: `syz.0.612' uses deprecated v2 capabilities in a way that may be insecure [ 150.094994][ T5948] loop2: detected capacity change from 0 to 764 [ 150.117809][ T5948] iso9660: Unknown parameter './cgroup.cpu/syz0' [ 150.722320][ T5951] loop5: detected capacity change from 0 to 512 [ 151.104491][ T5952] loop3: detected capacity change from 0 to 8192 [ 151.266122][ T5954] netlink: 'syz.3.615': attribute type 3 has an invalid length. [ 151.275242][ T5954] netlink: 'syz.3.615': attribute type 3 has an invalid length. [ 151.406131][ T5952] loop3: p1 < > p2 p4 < p5 > [ 151.410949][ T5952] loop3: partition table partially beyond EOD, truncated [ 151.418405][ T5952] loop3: p1 start 134217728 is beyond EOD, truncated [ 151.425413][ T5952] loop3: p2 size 591360 extends beyond EOD, truncated [ 151.434545][ T5952] loop3: p5 size 591360 extends beyond EOD, truncated [ 151.519554][ T5951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.534482][ T5951] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.651949][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 151.651989][ T28] audit: type=1326 audit(1775498906.954:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7c65ec819 code=0x0 [ 151.775808][ T5961] loop1: detected capacity change from 0 to 128 [ 151.782677][ T5961] vfat: Bad value for 'errors' [ 151.808328][ T5961] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 151.814890][ T5961] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.861440][ T5961] vhci_hcd vhci_hcd.0: Device attached [ 151.967062][ T5961] loop1: detected capacity change from 0 to 512 [ 152.034505][ T3002] loop3: p1 < > p2 p4 < p5 > [ 152.039405][ T3002] loop3: partition table partially beyond EOD, truncated [ 152.043804][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 152.047440][ T3002] loop3: p1 start 134217728 is beyond EOD, truncated [ 152.059769][ T3002] loop3: p2 size 591360 extends beyond EOD, truncated [ 152.073218][ T3002] loop3: p5 size 591360 extends beyond EOD, truncated [ 152.123563][ T35] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 152.172517][ T5970] loop2: detected capacity change from 0 to 2048 [ 152.230826][ T5970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.322159][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.423778][ T28] audit: type=1400 audit(1775498907.724:1210): avc: denied { remove_name } for pid=5968 comm="syz.2.618" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.447942][ T5969] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 5: comm syz.2.618: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 152.520145][ T5969] EXT4-fs (loop2): Remounting filesystem read-only [ 152.537677][ T28] audit: type=1400 audit(1775498907.754:1211): avc: denied { rmdir } for pid=5968 comm="syz.2.618" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.570303][ T5969] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 152.654065][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.784185][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.894306][ T5983] netlink: 'syz.3.619': attribute type 21 has an invalid length. [ 152.914515][ T5985] FAULT_INJECTION: forcing a failure. [ 152.914515][ T5985] name failslab, interval 1, probability 0, space 0, times 0 [ 152.927301][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: syz.2.623 Tainted: G W syzkaller #0 PREEMPT(full) [ 152.927412][ T5985] Tainted: [W]=WARN [ 152.927421][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 152.927437][ T5985] Call Trace: [ 152.927445][ T5985] [ 152.927455][ T5985] __dump_stack+0x1d/0x30 [ 152.927483][ T5985] dump_stack_lvl+0x95/0xd0 [ 152.927507][ T5985] dump_stack+0x15/0x1b [ 152.927581][ T5985] should_fail_ex+0x263/0x280 [ 152.927689][ T5985] ? tcf_block_get_ext+0x4dc/0xca0 [ 152.927720][ T5985] should_failslab+0x8c/0xb0 [ 152.927777][ T5985] __kmalloc_cache_noprof+0x5f/0x410 [ 152.927816][ T5985] tcf_block_get_ext+0x4dc/0xca0 [ 152.927843][ T5985] ? qdisc_alloc+0x384/0x410 [ 152.927876][ T5985] ? qdisc_create+0xf5/0x9d0 [ 152.927907][ T5985] ? netlink_rcv_skb+0x123/0x220 [ 152.927961][ T5985] ? netlink_unicast+0x5c0/0x690 [ 152.927996][ T5985] ? ___sys_sendmsg+0x195/0x1e0 [ 152.928130][ T5985] ? __pfx_multiq_init+0x10/0x10 [ 152.928155][ T5985] tcf_block_get+0x67/0xa0 [ 152.928187][ T5985] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 152.928251][ T5985] multiq_init+0x58/0x1a0 [ 152.928274][ T5985] ? nla_strcmp+0xc3/0xe0 [ 152.928313][ T5985] ? __pfx_multiq_init+0x10/0x10 [ 152.928335][ T5985] qdisc_create+0x582/0x9d0 [ 152.928424][ T5985] tc_modify_qdisc+0xffc/0x14f0 [ 152.928528][ T5985] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 152.928555][ T5985] rtnetlink_rcv_msg+0x6a7/0x720 [ 152.928578][ T5985] ? avc_has_perm_noaudit+0xab/0x130 [ 152.928656][ T5985] netlink_rcv_skb+0x123/0x220 [ 152.928695][ T5985] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.928742][ T5985] rtnetlink_rcv+0x1c/0x30 [ 152.928768][ T5985] netlink_unicast+0x5c0/0x690 [ 152.928807][ T5985] netlink_sendmsg+0x5c8/0x6f0 [ 152.928829][ T5985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.928912][ T5985] ____sys_sendmsg+0x563/0x5b0 [ 152.929008][ T5985] ___sys_sendmsg+0x195/0x1e0 [ 152.929047][ T5985] __x64_sys_sendmsg+0xd4/0x160 [ 152.929077][ T5985] x64_sys_call+0x194c/0x3020 [ 152.929157][ T5985] do_syscall_64+0x12c/0x370 [ 152.929195][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.929227][ T5985] RIP: 0033:0x7f440ee9c819 [ 152.929250][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.929308][ T5985] RSP: 002b:00007f440d8ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.929331][ T5985] RAX: ffffffffffffffda RBX: 00007f440f115fa0 RCX: 00007f440ee9c819 [ 152.929345][ T5985] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 152.929359][ T5985] RBP: 00007f440d8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 152.929376][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.929463][ T5985] R13: 00007f440f116038 R14: 00007f440f115fa0 R15: 00007ffda8620608 [ 152.929483][ T5985] [ 153.269157][ T5991] loop2: detected capacity change from 0 to 1024 [ 153.275929][ T5991] ext4: Unknown parameter 'dont_appraise' [ 153.334214][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'. [ 154.638022][ T5964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.648770][ T5962] vhci_hcd: connection reset by peer [ 154.675774][ T4953] vhci_hcd vhci_hcd.1: stop threads [ 154.690753][ T4953] vhci_hcd vhci_hcd.1: release socket [ 154.705158][ T4953] vhci_hcd vhci_hcd.1: disconnect device [ 154.719353][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 154.743588][ T6004] loop5: detected capacity change from 0 to 512 [ 154.772943][ T6001] tipc: Resetting bearer [ 154.785956][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 154.795773][ T28] audit: type=1400 audit(1775498910.104:1212): avc: denied { read } for pid=6000 comm="syz.5.628" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.823110][ T28] audit: type=1400 audit(1775498910.104:1213): avc: denied { open } for pid=6000 comm="syz.5.628" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 154.886321][ T6001] tipc: Disabling bearer [ 154.912971][ T6023] netlink: 14 bytes leftover after parsing attributes in process `syz.1.631'. [ 154.935484][ T6016] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.606483][ T6027] loop5: detected capacity change from 0 to 512 [ 155.981820][ T6028] loop2: detected capacity change from 0 to 8192 [ 156.215084][ T6028] loop2: p1 < > p2 p4 < p5 > [ 156.219844][ T6028] loop2: partition table partially beyond EOD, truncated [ 156.227964][ T6028] loop2: p1 start 134217728 is beyond EOD, truncated [ 156.234877][ T6028] loop2: p2 size 591360 extends beyond EOD, truncated [ 156.244294][ T6028] loop2: p5 size 591360 extends beyond EOD, truncated [ 156.283628][ T6027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.298260][ T6027] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.512896][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.556148][ T6042] loop0: detected capacity change from 0 to 512 [ 156.565296][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.603816][ T6042] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.636: invalid indirect mapped block 256 (level 2) [ 156.641580][ T6042] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 156.641890][ T6042] EXT4-fs (loop0): 2 truncates cleaned up [ 156.651075][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 156.651098][ C1] EXT4-fs (loop0): initial error at time 1775498911: ext4_free_branches:1023: inode 11 [ 156.651145][ C1] EXT4-fs (loop0): last error at time 1775498911: ext4_free_branches:1023: inode 11 [ 156.693171][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.701733][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.726334][ T6042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.743318][ T6024] loop1: detected capacity change from 0 to 8192 [ 156.750474][ T6023] bond0 (unregistering): Released all slaves [ 156.760968][ T28] audit: type=1326 audit(1775498912.064:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 156.794338][ T28] audit: type=1326 audit(1775498912.064:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 156.818110][ T6030] netlink: 'syz.2.632': attribute type 3 has an invalid length. [ 156.825836][ T6030] netlink: 'syz.2.632': attribute type 3 has an invalid length. [ 156.837280][ T6036] FAULT_INJECTION: forcing a failure. [ 156.837280][ T6036] name failslab, interval 1, probability 0, space 0, times 0 [ 156.852347][ T3381] syz1: Port: 1 Link DOWN [ 156.868150][ T6036] CPU: 1 UID: 0 PID: 6036 Comm: syz.3.635 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.868192][ T6036] Tainted: [W]=WARN [ 156.868201][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 156.868214][ T6036] Call Trace: [ 156.868220][ T6036] [ 156.868227][ T6036] __dump_stack+0x1d/0x30 [ 156.868263][ T6036] dump_stack_lvl+0x95/0xd0 [ 156.868294][ T6036] dump_stack+0x15/0x1b [ 156.868324][ T6036] should_fail_ex+0x263/0x280 [ 156.868432][ T6036] should_failslab+0x8c/0xb0 [ 156.868457][ T6036] kmem_cache_alloc_noprof+0x66/0x400 [ 156.868499][ T6036] ? skb_clone+0x151/0x1f0 [ 156.868526][ T6036] skb_clone+0x151/0x1f0 [ 156.868563][ T6036] __netlink_deliver_tap+0x2c9/0x500 [ 156.868589][ T6036] ? netlink_attachskb+0x2e2/0x660 [ 156.868630][ T6036] netlink_sendskb+0x126/0x150 [ 156.868693][ T6036] netlink_unicast+0x2a2/0x690 [ 156.868763][ T6036] netlink_ack+0x4c8/0x500 [ 156.868809][ T6036] netlink_rcv_skb+0x192/0x220 [ 156.868842][ T6036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.868940][ T6036] rtnetlink_rcv+0x1c/0x30 [ 156.868967][ T6036] netlink_unicast+0x5c0/0x690 [ 156.869009][ T6036] netlink_sendmsg+0x5c8/0x6f0 [ 156.869032][ T6036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.869053][ T6036] ____sys_sendmsg+0x563/0x5b0 [ 156.869123][ T6036] ___sys_sendmsg+0x195/0x1e0 [ 156.869157][ T6036] __x64_sys_sendmsg+0xd4/0x160 [ 156.869192][ T6036] x64_sys_call+0x194c/0x3020 [ 156.869228][ T6036] do_syscall_64+0x12c/0x370 [ 156.869331][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.869388][ T6036] RIP: 0033:0x7f97ff0ec819 [ 156.869408][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.869432][ T6036] RSP: 002b:00007f97fdb1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.869486][ T6036] RAX: ffffffffffffffda RBX: 00007f97ff366090 RCX: 00007f97ff0ec819 [ 156.869503][ T6036] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 156.869521][ T6036] RBP: 00007f97fdb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 156.869539][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.869556][ T6036] R13: 00007f97ff366128 R14: 00007f97ff366090 R15: 00007ffef8026f38 [ 156.869637][ T6036] [ 157.105611][ T28] audit: type=1326 audit(1775498912.064:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.129003][ T28] audit: type=1326 audit(1775498912.064:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.154616][ T28] audit: type=1326 audit(1775498912.064:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.178022][ T28] audit: type=1326 audit(1775498912.064:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.210636][ T35] usb 3-1: enqueue for inactive port 0 [ 157.232329][ T35] usb 3-1: enqueue for inactive port 0 [ 157.246876][ T28] audit: type=1326 audit(1775498912.064:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.270897][ T28] audit: type=1326 audit(1775498912.064:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.320151][ T28] audit: type=1326 audit(1775498912.064:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.343613][ T35] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 157.358625][ T6047] syzkaller1: entered promiscuous mode [ 157.364334][ T6047] syzkaller1: entered allmulticast mode [ 157.372092][ T28] audit: type=1326 audit(1775498912.064:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.0.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 157.669407][ T6051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.708855][ T6057] loop3: detected capacity change from 0 to 1024 [ 157.716267][ T6057] EXT4-fs: dax option not supported [ 157.728103][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.784951][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.831027][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 157.846027][ T6063] gretap0: entered promiscuous mode [ 157.851300][ T6063] macsec1: entered promiscuous mode [ 157.877029][ T6063] macsec1: entered allmulticast mode [ 157.882383][ T6063] gretap0: entered allmulticast mode [ 157.893638][ T6063] gretap0: left allmulticast mode [ 157.901813][ T6065] loop3: detected capacity change from 0 to 2048 [ 157.904072][ T6063] gretap0: left promiscuous mode [ 157.965011][ T6065] loop3: p1 p2 p3 [ 158.012559][ T6071] loop5: detected capacity change from 0 to 128 [ 158.028945][ T6071] vfat: Bad value for 'errors' [ 158.050926][ T6071] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 158.057499][ T6071] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 158.101903][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 158.115323][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 158.123930][ T6071] vhci_hcd vhci_hcd.0: Device attached [ 158.131186][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 158.151669][ T6080] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.165873][ T6080] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.173674][ T6076] vhci_hcd: cannot find a urb of seqnum 4294967291 max seqnum 2 [ 158.193946][ T36] vhci_hcd vhci_hcd.5: stop threads [ 158.199202][ T36] vhci_hcd vhci_hcd.5: release socket [ 158.223704][ T36] vhci_hcd vhci_hcd.5: disconnect device [ 158.225998][ T6083] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.272515][ T6080] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.282868][ T6080] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.296903][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 158.302301][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 158.336907][ T6092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6092 comm=syz.3.648 [ 158.349992][ T6079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6079 comm=syz.0.649 [ 158.363392][ T6083] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.376819][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.390783][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.400144][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.410265][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.419981][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.455056][ T6080] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.662413][ T6098] loop2: detected capacity change from 0 to 8192 [ 158.677601][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.694553][ T6098] loop2: p1 < > p2 p4 < p5 > [ 158.699396][ T6098] loop2: partition table partially beyond EOD, truncated [ 158.707032][ T6098] loop2: p1 start 134217728 is beyond EOD, truncated [ 158.714019][ T6098] loop2: p2 size 591360 extends beyond EOD, truncated [ 158.727932][ T6098] loop2: p5 size 591360 extends beyond EOD, truncated [ 158.874252][ T3002] loop2: p1 < > p2 p4 < p5 > [ 158.886324][ T3002] loop2: partition table partially beyond EOD, truncated [ 158.911751][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.922548][ T6080] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.934506][ T6095] netlink: 'syz.1.651': attribute type 36 has an invalid length. [ 158.951401][ T3002] loop2: p1 start 134217728 is beyond EOD, truncated [ 158.978189][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.992206][ T3002] loop2: p2 size 591360 extends beyond EOD, truncated [ 159.043222][ T6098] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 159.051743][ T6098] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 159.094383][ T6095] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 159.155426][ T3002] loop2: p5 size 591360 extends beyond EOD, truncated [ 159.181522][ T6095] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 159.355045][ T6083] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.381149][ T6080] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.397770][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 159.397868][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 159.418896][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 159.430923][ T6080] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.463233][ T6083] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.516594][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 159.527833][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 159.560751][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.575770][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 159.585403][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.604029][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.632374][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.642149][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.651921][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.675886][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.687347][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.705015][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.719641][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.728155][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.736507][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.941029][ T6117] FAULT_INJECTION: forcing a failure. [ 160.941029][ T6117] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 160.954864][ T6071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.973653][ T6117] CPU: 1 UID: 0 PID: 6117 Comm: syz.1.657 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.973693][ T6117] Tainted: [W]=WARN [ 160.973702][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.973790][ T6117] Call Trace: [ 160.973798][ T6117] [ 160.973807][ T6117] __dump_stack+0x1d/0x30 [ 160.973841][ T6117] dump_stack_lvl+0x95/0xd0 [ 160.973872][ T6117] dump_stack+0x15/0x1b [ 160.973903][ T6117] should_fail_ex+0x263/0x280 [ 160.974019][ T6117] should_fail_alloc_page+0xf2/0x100 [ 160.974045][ T6117] __alloc_frozen_pages_noprof+0x108/0x360 [ 160.974145][ T6117] alloc_pages_mpol+0xb3/0x260 [ 160.974179][ T6117] alloc_pages_noprof+0x8f/0x140 [ 160.974252][ T6117] __pmd_alloc+0x47/0x430 [ 160.974321][ T6117] handle_mm_fault+0x1ebb/0x3020 [ 160.974422][ T6117] ? mt_find+0x291/0x3d0 [ 160.974519][ T6117] ? lock_mm_and_find_vma+0x8b/0x440 [ 160.974548][ T6117] do_user_addr_fault+0x3fd/0x1050 [ 160.974594][ T6117] exc_page_fault+0x62/0xa0 [ 160.974617][ T6117] asm_exc_page_fault+0x26/0x30 [ 160.974699][ T6117] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 160.974743][ T6117] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e [ 160.974768][ T6117] RSP: 0018:ffffc9000137be08 EFLAGS: 00050202 [ 160.974789][ T6117] RAX: ffff888101d25e88 RBX: 0000000000000004 RCX: 0000000000000004 [ 160.974804][ T6117] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc9000137be44 [ 160.974818][ T6117] RBP: 0000000000000000 R08: 000000000000025e R09: 0000000000000000 [ 160.974874][ T6117] R10: 0001c9000137be44 R11: 0001c9000137be47 R12: 0000000000000000 [ 160.974892][ T6117] R13: ffff8881082049c0 R14: ffffc9000137be44 R15: 0000200000000080 [ 160.974917][ T6117] _copy_from_user+0x6f/0xb0 [ 160.975023][ T6117] do_sock_getsockopt+0xf1/0x210 [ 160.975124][ T6117] __x64_sys_getsockopt+0x11d/0x1a0 [ 160.975235][ T6117] x64_sys_call+0x2dcf/0x3020 [ 160.975272][ T6117] do_syscall_64+0x12c/0x370 [ 160.975301][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.975402][ T6117] RIP: 0033:0x7ff7c65ec819 [ 160.975422][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.975441][ T6117] RSP: 002b:00007ff7c503f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 160.975520][ T6117] RAX: ffffffffffffffda RBX: 00007ff7c6865fa0 RCX: 00007ff7c65ec819 [ 160.975539][ T6117] RDX: 000000000000000b RSI: 000000000000010e RDI: 0000000000000003 [ 160.975553][ T6117] RBP: 00007ff7c503f090 R08: 0000200000000080 R09: 0000000000000000 [ 160.975566][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.975625][ T6117] R13: 00007ff7c6866038 R14: 00007ff7c6865fa0 R15: 00007ffc17dc1fd8 [ 160.975644][ T6117] [ 161.344053][ T6124] loop5: detected capacity change from 0 to 1024 [ 161.350927][ T6124] EXT4-fs: Ignoring removed orlov option [ 161.385355][ T6129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=6129 comm=syz.1.661 [ 161.401720][ T6124] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 161.420968][ T6129] netlink: 56 bytes leftover after parsing attributes in process `syz.1.661'. [ 161.648990][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.678006][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.692154][ T6136] loop2: detected capacity change from 0 to 1024 [ 161.757066][ T6136] loop2: detected capacity change from 0 to 512 [ 161.768577][ T6145] loop5: detected capacity change from 0 to 512 [ 161.798984][ T6145] EXT4-fs: quotafile must be on filesystem root [ 161.811597][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.837150][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.927387][ T6149] loop2: detected capacity change from 0 to 512 [ 162.347568][ T6159] netlink: 'syz.2.673': attribute type 27 has an invalid length. [ 162.370948][ T6159] netlink: 164 bytes leftover after parsing attributes in process `syz.2.673'. [ 162.394546][ T28] kauditd_printk_skb: 614 callbacks suppressed [ 162.394564][ T28] audit: type=1400 audit(1775498917.704:1838): avc: denied { getopt } for pid=6158 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 162.850322][ T6175] loop2: detected capacity change from 0 to 8192 [ 162.895598][ T4152] loop2: p1 < > p2 p4 < p5 > [ 162.900478][ T4152] loop2: partition table partially beyond EOD, truncated [ 162.913788][ T4152] loop2: p1 start 134217728 is beyond EOD, truncated [ 162.993080][ T4152] loop2: p2 size 591360 extends beyond EOD, truncated [ 163.041872][ T6177] netlink: 'syz.2.678': attribute type 3 has an invalid length. [ 163.050070][ T6177] netlink: 'syz.2.678': attribute type 3 has an invalid length. [ 163.123830][ T4152] loop2: p5 size 591360 extends beyond EOD, truncated [ 163.521899][ T6175] loop2: p1 < > p2 p4 < p5 > [ 163.526665][ T6175] loop2: partition table partially beyond EOD, truncated [ 163.533887][ T6175] loop2: p1 start 134217728 is beyond EOD, truncated [ 163.540593][ T6175] loop2: p2 size 591360 extends beyond EOD, truncated [ 163.548734][ T6175] loop2: p5 size 591360 extends beyond EOD, truncated [ 164.312664][ T6181] loop2: detected capacity change from 0 to 8192 [ 164.364516][ T4152] loop2: p1 < > p2 p4 < p5 > [ 164.369489][ T4152] loop2: partition table partially beyond EOD, truncated [ 164.402010][ T4152] loop2: p1 start 134217728 is beyond EOD, truncated [ 164.486247][ T6182] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 164.494591][ T6182] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 164.568754][ T4152] loop2: p2 size 591360 extends beyond EOD, truncated [ 164.649146][ T4152] loop2: p5 size 591360 extends beyond EOD, truncated [ 164.942690][ T6181] loop2: p1 < > p2 p4 < p5 > [ 164.947431][ T6181] loop2: partition table partially beyond EOD, truncated [ 164.954593][ T6181] loop2: p1 start 134217728 is beyond EOD, truncated [ 164.961297][ T6181] loop2: p2 size 591360 extends beyond EOD, truncated [ 164.987309][ T6181] loop2: p5 size 591360 extends beyond EOD, truncated [ 165.114121][ T6192] lo speed is unknown, defaulting to 1000 [ 165.465080][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 165.476280][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 165.646831][ T28] audit: type=1400 audit(1775498920.944:1839): avc: denied { read append } for pid=6195 comm="syz.0.685" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.673239][ T28] audit: type=1400 audit(1775498920.944:1840): avc: denied { open } for pid=6195 comm="syz.0.685" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.747378][ T28] audit: type=1400 audit(1775498921.054:1841): avc: denied { ioctl } for pid=6187 comm="syz.5.682" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 165.853390][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'. [ 165.866960][ T6207] macsec2: entered promiscuous mode [ 165.873127][ T6207] gretap0: entered promiscuous mode [ 165.881178][ T6207] macsec2: entered allmulticast mode [ 165.886720][ T6207] gretap0: entered allmulticast mode [ 165.893498][ T6207] gretap0: left allmulticast mode [ 165.898646][ T6207] gretap0: left promiscuous mode [ 166.001757][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 166.073314][ T6214] netlink: 'syz.2.692': attribute type 83 has an invalid length. [ 166.094837][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'. [ 166.113612][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 166.365868][ T6219] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.546892][ T6222] loop2: detected capacity change from 0 to 512 [ 166.645215][ T6222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.659763][ T6222] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.762921][ T6219] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.984009][ T28] audit: type=1400 audit(1775498922.284:1842): avc: denied { cpu } for pid=6226 comm="syz.1.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.023133][ T6216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6216 comm=syz.0.693 [ 167.254316][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.299431][ T6219] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.344115][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.354654][ T6229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.695'. [ 167.393934][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.429599][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.462282][ T6219] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.592971][ T4953] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.668204][ T1787] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.690394][ T1787] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.751632][ T1787] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.777885][ T6238] loop1: detected capacity change from 0 to 512 [ 167.814358][ T6238] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 167.855997][ T6238] EXT4-fs (loop1): 1 truncate cleaned up [ 167.862262][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.933963][ T28] audit: type=1400 audit(1775498923.244:1843): avc: denied { append } for pid=6237 comm="syz.1.698" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.171046][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.186930][ T28] audit: type=1400 audit(1775498923.494:1844): avc: denied { setattr } for pid=6237 comm="syz.1.698" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 168.284752][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 168.328129][ T6251] macsec2: entered promiscuous mode [ 168.333479][ T6251] gretap0: entered promiscuous mode [ 168.383759][ T6251] macsec2: entered allmulticast mode [ 168.394404][ T6251] gretap0: entered allmulticast mode [ 168.422191][ T6251] gretap0: left allmulticast mode [ 168.427735][ T6251] gretap0: left promiscuous mode [ 168.436028][ T6244] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 168.688215][ T6257] loop0: detected capacity change from 0 to 8192 [ 168.758640][ T4152] loop0: p1 < > p2 p4 < p5 > [ 168.774295][ T4152] loop0: partition table partially beyond EOD, truncated [ 168.882305][ T6260] netlink: 'syz.0.703': attribute type 3 has an invalid length. [ 168.890840][ T6260] netlink: 'syz.0.703': attribute type 3 has an invalid length. [ 168.922919][ T4152] loop0: p1 start 134217728 is beyond EOD, truncated [ 169.007644][ T4152] loop0: p2 size 591360 extends beyond EOD, truncated [ 169.123319][ T6262] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 169.133777][ T4152] loop0: p5 size 591360 extends beyond EOD, truncated [ 169.174554][ T6262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.208606][ T6262] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 169.244781][ T6262] vxlan0: entered promiscuous mode [ 169.259366][ T28] audit: type=1400 audit(1775498924.564:1845): avc: denied { connect } for pid=6264 comm="syz.5.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 169.293017][ T6262] bond2: (slave vxlan0): making interface the new active one [ 169.322088][ T6262] bond2: (slave vxlan0): Enslaving as an active interface with an up link [ 169.407734][ T1787] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.418254][ T6257] loop0: p1 < > p2 p4 < p5 > [ 169.422984][ T6257] loop0: partition table partially beyond EOD, truncated [ 169.430248][ T6257] loop0: p1 start 134217728 is beyond EOD, truncated [ 169.437096][ T6257] loop0: p2 size 591360 extends beyond EOD, truncated [ 169.445291][ T1787] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.454610][ T1787] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.463627][ T6257] loop0: p5 size 591360 extends beyond EOD, truncated [ 169.484958][ T1787] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.541996][ T28] audit: type=1400 audit(1775498924.844:1846): avc: denied { ioctl } for pid=6271 comm="syz.0.706" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 169.634651][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 169.645772][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 169.657215][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 169.719620][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 169.730758][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 169.741727][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 169.767669][ T6277] team0: Port device gtp0 added [ 170.166605][ T6284] loop2: detected capacity change from 0 to 8192 [ 170.355592][ T6286] netlink: 'syz.2.710': attribute type 3 has an invalid length. [ 170.363641][ T6286] netlink: 'syz.2.710': attribute type 3 has an invalid length. [ 170.663866][ T4152] loop2: p1 < > p2 p4 < p5 > [ 170.668637][ T4152] loop2: partition table partially beyond EOD, truncated [ 170.682566][ T4152] loop2: p1 start 134217728 is beyond EOD, truncated [ 170.697745][ T4152] loop2: p2 size 591360 extends beyond EOD, truncated [ 170.713400][ T4152] loop2: p5 size 591360 extends beyond EOD, truncated [ 170.771282][ T6238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.825884][ T6284] loop2: p1 < > p2 p4 < p5 > [ 170.830687][ T6284] loop2: partition table partially beyond EOD, truncated [ 170.837887][ T6284] loop2: p1 start 134217728 is beyond EOD, truncated [ 170.844714][ T6284] loop2: p2 size 591360 extends beyond EOD, truncated [ 170.853056][ T6284] loop2: p5 size 591360 extends beyond EOD, truncated [ 171.039260][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.094939][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 171.106108][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 171.124853][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 171.182584][ T6308] loop1: detected capacity change from 0 to 2048 [ 171.217467][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 171.226201][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 171.248977][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 171.305990][ T6308] loop1: p1 < > p3 < > p4 < > [ 171.311064][ T6308] loop1: partition table partially beyond EOD, truncated [ 171.330638][ T6308] loop1: p1 start 3405774849 is beyond EOD, truncated [ 171.350060][ T6308] loop1: p3 start 2304 is beyond EOD, truncated [ 171.368754][ T3002] loop1: p1 < > p3 < > p4 < > [ 171.373786][ T3002] loop1: partition table partially beyond EOD, truncated [ 171.380945][ T3002] loop1: p1 start 3405774849 is beyond EOD, truncated [ 171.403561][ T3002] loop1: p3 start 2304 is beyond EOD, truncated [ 171.444992][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 171.487181][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 171.683142][ T6324] loop0: detected capacity change from 0 to 128 [ 171.917311][ T6333] team0: Port device gtp1 added [ 171.940765][ T6334] lo speed is unknown, defaulting to 1000 [ 172.364012][ T6343] loop0: detected capacity change from 0 to 512 [ 172.491526][ T6343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.505897][ T6343] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.523891][ T6343] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.660200][ T6357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.731'. [ 173.749754][ T6359] loop5: detected capacity change from 0 to 512 [ 173.828825][ T6359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.133834][ T6359] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.465391][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.689583][ T28] audit: type=1400 audit(1775498929.994:1847): avc: denied { bind } for pid=6379 comm="syz.2.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 174.711651][ T28] audit: type=1326 audit(1775498929.994:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.0.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x0 [ 174.737822][ T28] audit: type=1400 audit(1775498930.044:1849): avc: denied { read } for pid=6382 comm="syz.5.738" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.761755][ T6386] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.739'. [ 174.771076][ T6387] loop0: detected capacity change from 0 to 128 [ 174.771080][ T6386] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 174.772028][ T6387] vfat: Bad value for 'errors' [ 174.817071][ T28] audit: type=1400 audit(1775498930.044:1850): avc: denied { open } for pid=6382 comm="syz.5.738" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.853637][ T6387] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 174.860308][ T6387] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.884230][ T6387] vhci_hcd vhci_hcd.0: Device attached [ 174.954805][ T6391] vhci_hcd: cannot find a urb of seqnum 4294967291 max seqnum 0 [ 174.964106][ T50] vhci_hcd vhci_hcd.0: stop threads [ 174.969420][ T50] vhci_hcd vhci_hcd.0: release socket [ 174.975329][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 175.009190][ T6393] loop0: detected capacity change from 0 to 512 [ 175.512095][ T6437] loop2: detected capacity change from 0 to 512 [ 175.524339][ T6437] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 175.543451][ T6437] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.550352][ T6437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.752: bg 0: block 104: invalid block bitmap [ 175.563171][ T6437] loop2: lost filesystem error report for type 5 error -117 [ 175.563313][ T6437] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 175.570666][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 175.570690][ C0] EXT4-fs (loop2): initial error at time 1775498930: ext4_validate_block_bitmap:432 [ 175.570742][ C0] EXT4-fs (loop2): last error at time 1775498930: ext4_validate_block_bitmap:432 [ 175.604970][ T6437] loop2: lost filesystem error report for type 5 error -117 [ 175.605177][ T6437] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.752: invalid indirect mapped block 1 (level 1) [ 175.625833][ T6437] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 175.626038][ T6437] EXT4-fs (loop2): 1 truncate cleaned up [ 175.641576][ T6437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.672215][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.851963][ T6450] loop2: detected capacity change from 0 to 1024 [ 177.673020][ T6387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.732832][ T6464] 9pnet_fd: p9_fd_create_unix (6464): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 177.741456][ T28] audit: type=1400 audit(1775498933.044:1851): avc: denied { create } for pid=6463 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.868470][ T6469] loop2: detected capacity change from 0 to 128 [ 177.872343][ T28] audit: type=1400 audit(1775498933.164:1852): avc: denied { setopt } for pid=6463 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.910410][ T28] audit: type=1400 audit(1775498933.164:1853): avc: denied { open } for pid=6463 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.944644][ T28] audit: type=1400 audit(1775498933.184:1854): avc: denied { kernel } for pid=6467 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.966035][ T28] audit: type=1400 audit(1775498933.184:1855): avc: denied { tracepoint } for pid=6467 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 178.160587][ T6474] loop1: detected capacity change from 0 to 8192 [ 178.283097][ T6474] loop1: p1 < > p2 p4 < p5 > [ 178.288055][ T6474] loop1: partition table partially beyond EOD, truncated [ 178.295618][ T6474] loop1: p1 start 134217728 is beyond EOD, truncated [ 178.302497][ T6474] loop1: p2 size 591360 extends beyond EOD, truncated [ 178.312381][ T6474] loop1: p5 size 591360 extends beyond EOD, truncated [ 178.394837][ T6474] netlink: 'syz.1.764': attribute type 3 has an invalid length. [ 178.403361][ T6474] netlink: 'syz.1.764': attribute type 3 has an invalid length. [ 178.477282][ T3002] loop1: p1 < > p2 p4 < p5 > [ 178.539778][ T3002] loop1: partition table partially beyond EOD, truncated [ 178.612669][ T3002] loop1: p1 start 134217728 is beyond EOD, truncated [ 178.677251][ T3002] loop1: p2 size 591360 extends beyond EOD, truncated [ 178.690754][ T28] audit: type=1400 audit(1775498933.304:1856): avc: denied { write } for pid=6467 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 178.729065][ T3002] loop1: p5 size 591360 extends beyond EOD, truncated [ 179.358411][ T6496] loop5: detected capacity change from 0 to 8192 [ 179.395149][ T6496] loop5: p1 < > p2 p4 < p5 > [ 179.400075][ T6496] loop5: partition table partially beyond EOD, truncated [ 179.407655][ T6496] loop5: p1 start 134217728 is beyond EOD, truncated [ 179.414506][ T6496] loop5: p2 size 591360 extends beyond EOD, truncated [ 179.427032][ T6496] loop5: p5 size 591360 extends beyond EOD, truncated [ 179.524803][ T6499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6499 comm=syz.3.772 [ 179.608999][ T6494] xt_l2tp: v2 tid > 0xffff: 262144 [ 179.710286][ T3002] loop5: p1 < > p2 p4 < p5 > [ 179.764235][ T3002] loop5: partition table partially beyond EOD, truncated [ 179.830233][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.853345][ T3002] loop5: p1 start 134217728 is beyond EOD, truncated [ 179.867355][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.884246][ T3002] loop5: p2 size 591360 extends beyond EOD, truncated [ 179.906614][ T3002] loop5: p5 size 591360 extends beyond EOD, truncated [ 179.921985][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.942711][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 179.954427][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 179.959392][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 179.992697][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.008654][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 180.008841][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 180.021194][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 180.280656][ T6501] netlink: 'syz.5.773': attribute type 3 has an invalid length. [ 180.288481][ T6501] netlink: 'syz.5.773': attribute type 3 has an invalid length. [ 180.332422][ T6497] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.343611][ T6497] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.415375][ T6497] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.433736][ T6497] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.505646][ T6497] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.515691][ T6497] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.565223][ T6497] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.575237][ T6497] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.611769][ T6517] loop0: detected capacity change from 0 to 512 [ 180.632021][ T4953] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.640383][ T4953] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.653284][ T6517] EXT4-fs: journaled quota format not specified [ 180.671724][ T4953] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.691682][ T4953] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.723588][ T4953] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.742025][ T4953] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.773574][ T4953] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.789780][ T4953] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.872426][ T6524] team0: Port device gtp2 added [ 180.919709][ T6528] team0: Refused to change device type [ 181.176673][ T6538] loop2: detected capacity change from 0 to 512 [ 181.204066][ T6538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.314787][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.362823][ T6552] lo speed is unknown, defaulting to 1000 [ 181.402976][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 181.402994][ T28] audit: type=1400 audit(1775498936.694:1858): avc: denied { getopt } for pid=6550 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.607392][ T6581] loop0: detected capacity change from 0 to 128 [ 181.616761][ T6575] team0: Refused to change device type [ 181.696623][ T28] audit: type=1400 audit(1775498937.004:1859): avc: denied { watch watch_reads } for pid=6579 comm="syz.0.797" path="/181/file0/file0" dev="loop0" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 181.723187][ T28] audit: type=1326 audit(1775498937.024:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 181.762173][ T28] audit: type=1326 audit(1775498937.024:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 181.785635][ T28] audit: type=1326 audit(1775498937.024:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 181.809175][ T28] audit: type=1326 audit(1775498937.024:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 181.832624][ T28] audit: type=1326 audit(1775498937.024:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 181.855742][ T6531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.864974][ T28] audit: type=1326 audit(1775498937.024:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f487d51d04e code=0x7ffc0000 [ 181.891260][ T28] audit: type=1326 audit(1775498937.024:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487d55c819 code=0x7ffc0000 [ 181.915766][ T28] audit: type=1326 audit(1775498937.064:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6579 comm="syz.0.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f487d51d04e code=0x7ffc0000 [ 182.000020][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'. [ 182.020772][ T6591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6591 comm=syz.0.801 [ 182.061411][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6598 comm=syz.1.799 [ 182.091991][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.102060][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.117340][ T6593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.126478][ T6593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.137308][ T6601] loop2: detected capacity change from 0 to 128 [ 182.145460][ T6601] vfat: Bad value for 'errors' [ 182.193892][ T6601] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 182.200480][ T6601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 182.226240][ T6601] vhci_hcd vhci_hcd.0: Device attached [ 182.247370][ T6603] vhci_hcd: cannot find a urb of seqnum 4294967291 max seqnum 0 [ 182.260065][ T36] vhci_hcd vhci_hcd.2: stop threads [ 182.265673][ T36] vhci_hcd vhci_hcd.2: release socket [ 182.271087][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 182.341547][ T6611] hub 9-0:1.0: USB hub found [ 182.346616][ T6611] hub 9-0:1.0: 8 ports detected [ 183.023025][ T6617] loop1: detected capacity change from 0 to 8192 [ 183.055348][ T4152] loop1: p1 < > p2 p4 < p5 > [ 183.159748][ T4152] loop1: partition table partially beyond EOD, truncated [ 183.179061][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 183.194043][ T4152] loop1: p1 start 134217728 is beyond EOD, truncated [ 183.223612][ T4152] loop1: p2 size 591360 extends beyond EOD, truncated [ 183.249107][ T6621] lo speed is unknown, defaulting to 1000 [ 183.262895][ T4152] loop1: p5 size 591360 extends beyond EOD, truncated [ 183.296134][ T3381] Process accounting resumed [ 183.526421][ T6617] loop1: p1 < > p2 p4 < p5 > [ 183.531158][ T6617] loop1: partition table partially beyond EOD, truncated [ 183.538352][ T6617] loop1: p1 start 134217728 is beyond EOD, truncated [ 183.545299][ T6617] loop1: p2 size 591360 extends beyond EOD, truncated [ 183.555500][ T6617] loop1: p5 size 591360 extends beyond EOD, truncated [ 183.789697][ T6640] loop2: detected capacity change from 0 to 512 [ 183.813853][ T6640] EXT4-fs: Ignoring removed i_version option [ 183.819996][ T6640] EXT4-fs: test_dummy_encryption option not supported [ 185.994041][ T6655] loop2: detected capacity change from 0 to 512 [ 186.172213][ T6655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.187431][ T6655] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.208611][ T6655] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.010625][ T6662] loop3: detected capacity change from 0 to 8192 [ 188.055700][ T4152] loop3: p1 < > p2 p4 < p5 > [ 188.086297][ T4152] loop3: partition table partially beyond EOD, truncated [ 188.101382][ T4152] loop3: p1 start 134217728 is beyond EOD, truncated [ 188.109490][ T4152] loop3: p2 size 591360 extends beyond EOD, truncated [ 188.126926][ T6668] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 188.129612][ T4152] loop3: p5 size 591360 extends beyond EOD, [ 188.134937][ T6668] netlink: 'syz.3.819': attribute type 3 has an invalid length. [ 188.135938][ T4152] truncated [ 188.153596][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 188.153633][ T28] audit: type=1326 audit(1775498943.464:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6666 comm="syz.2.820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f440ee9c819 code=0x0 [ 188.192806][ T6662] loop3: p1 < > p2 p4 < p5 > [ 188.197656][ T6662] loop3: partition table partially beyond EOD, truncated [ 188.205166][ T6662] loop3: p1 start 134217728 is beyond EOD, truncated [ 188.212016][ T6662] loop3: p2 size 591360 extends beyond EOD, truncated [ 188.222426][ T6662] loop3: p5 size 591360 extends beyond EOD, truncated [ 188.290936][ T6670] loop2: detected capacity change from 0 to 128 [ 188.340739][ T6670] vfat: Bad value for 'errors' [ 188.406427][ T6670] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 188.413012][ T6670] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 188.446031][ T6670] vhci_hcd vhci_hcd.0: Device attached [ 188.476528][ T6672] vhci_hcd: cannot find a urb of seqnum 4294967291 max seqnum 0 [ 188.489261][ T12] vhci_hcd vhci_hcd.2: stop threads [ 188.499372][ T12] vhci_hcd vhci_hcd.2: release socket [ 188.516147][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 188.557356][ T6671] netlink: 76 bytes leftover after parsing attributes in process `syz.5.817'. [ 188.739956][ T6680] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 188.767627][ T6680] team0: Device xfrm0 is of different type [ 189.088904][ T6692] loop0: detected capacity change from 0 to 8192 [ 189.164820][ T4152] loop0: p1 < > p2 p4 < p5 > [ 189.200832][ T4152] loop0: partition table partially beyond EOD, truncated [ 189.225919][ T4152] loop0: p1 start 134217728 is beyond EOD, truncated [ 189.243566][ T4152] loop0: p2 size 591360 extends beyond EOD, truncated [ 189.256946][ T28] audit: type=1400 audit(1775498944.564:1922): avc: denied { cpu } for pid=6694 comm="syz.3.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 189.280214][ T4152] loop0: p5 size 591360 extends beyond EOD, truncated [ 189.300155][ T6680] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.822'. [ 189.584864][ T6692] loop0: p1 < > p2 p4 < p5 > [ 189.589590][ T6692] loop0: partition table partially beyond EOD, truncated [ 189.596709][ T6692] loop0: p1 start 134217728 is beyond EOD, truncated [ 189.603561][ T6692] loop0: p2 size 591360 extends beyond EOD, truncated [ 189.611572][ T6692] loop0: p5 size 591360 extends beyond EOD, truncated [ 189.695830][ T28] audit: type=1326 audit(1775498945.004:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6701 comm="syz.3.828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff0ec819 code=0x0 [ 189.736039][ T28] audit: type=1326 audit(1775498945.034:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6703 comm="syz.5.827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0dffbc819 code=0x0 [ 189.767266][ T6707] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 189.782451][ T6707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.804805][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 189.814660][ T6709] loop3: detected capacity change from 0 to 128 [ 189.821198][ T6709] vfat: Bad value for 'errors' [ 189.835047][ T6707] bond4: (slave bridge2): making interface the new active one [ 189.843220][ T6707] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 189.853233][ T6712] loop5: detected capacity change from 0 to 128 [ 189.860477][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 189.873029][ T6707] macvlan3: entered promiscuous mode [ 189.878733][ T6707] macvlan3: entered allmulticast mode [ 189.895817][ T6712] vfat: Bad value for 'errors' [ 190.023389][ T6709] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 190.030016][ T6709] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.048070][ T6712] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 190.054745][ T6712] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.088467][ T6709] vhci_hcd vhci_hcd.0: Device attached [ 190.107591][ T6727] loop3: detected capacity change from 0 to 512 [ 190.114597][ T6712] vhci_hcd vhci_hcd.0: Device attached [ 190.175291][ T6712] loop5: detected capacity change from 0 to 512 [ 190.181616][ T6720] vhci_hcd: cannot find a urb of seqnum 4294967291 max seqnum 2 [ 190.201673][ T50] vhci_hcd vhci_hcd.5: stop threads [ 190.217922][ T50] vhci_hcd vhci_hcd.5: release socket [ 190.223837][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 190.274353][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 190.298325][ T6734] syzkaller0: entered promiscuous mode [ 190.328120][ T6734] loop2: detected capacity change from 0 to 2048 [ 190.343995][ T35] usb 7-1: new full-speed USB device number 4 using vhci_hcd [ 190.395796][ T6734] loop2: p1 p2 [ 190.443793][ T6742] loop1: detected capacity change from 0 to 512 [ 190.459521][ T6733] loop0: detected capacity change from 0 to 1024 [ 190.496780][ T6742] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 190.504361][ T6733] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 190.509926][ T6742] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 190.510126][ T6742] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.834: Corrupt directory, running e2fsck is recommended [ 190.547791][ T6719] vhci_hcd: connection reset by peer [ 190.549494][ T6742] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 190.557087][ T204] vhci_hcd vhci_hcd.3: stop threads [ 190.566865][ T204] vhci_hcd vhci_hcd.3: release socket [ 190.572596][ T6733] System zones: 0-1, 3-36 [ 190.579055][ T204] vhci_hcd vhci_hcd.3: disconnect device [ 190.589127][ T6742] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.834: corrupted in-inode xattr: e_name out of bounds [ 190.618528][ T6742] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 190.621950][ T6742] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.834: couldn't read orphan inode 15 (err -117) [ 190.630317][ T6733] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.829: bad orphan inode 134217728 [ 190.632831][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 190.632891][ C1] EXT4-fs (loop1): initial error at time 1775498945: ext4_iget_extra_inode:5040: inode 15 [ 190.633091][ C1] EXT4-fs (loop1): last error at time 1775498945: ext4_iget_extra_inode:5040: inode 15 [ 190.633722][ T6742] loop1: lost filesystem error report for type 5 error -117 [ 190.659315][ T6747] netlink: 144 bytes leftover after parsing attributes in process `syz.2.835'. [ 190.673173][ T6733] loop0: lost filesystem error report for type 5 error -117 [ 190.688114][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.713613][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 190.726994][ T6742] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.730413][ C0] EXT4-fs (loop0): initial error at time 1775498946: ext4_orphan_get:1423 [ 190.730445][ C0] EXT4-fs (loop0): last error at time 1775498946: ext4_orphan_get:1423 [ 190.743213][ T6733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.834027][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 190.843624][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'. [ 190.924400][ T6754] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 190.959231][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.219031][ T6760] loop2: detected capacity change from 0 to 8192 [ 191.428364][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 191.582955][ T6771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.675078][ T4152] loop2: p1 < > p2 p4 < p5 > [ 191.680009][ T4152] loop2: partition table partially beyond EOD, truncated [ 191.687644][ T4152] loop2: p1 start 134217728 is beyond EOD, truncated [ 191.694646][ T4152] loop2: p2 size 591360 extends beyond EOD, truncated [ 191.705141][ T4152] loop2: p5 size 591360 extends beyond EOD, truncated [ 191.737047][ T6760] loop2: p1 < > p2 p4 < p5 > [ 191.741770][ T6760] loop2: partition table partially beyond EOD, truncated [ 191.748956][ T6760] loop2: p1 start 134217728 is beyond EOD, truncated [ 191.755792][ T6760] loop2: p2 size 591360 extends beyond EOD, truncated [ 191.779148][ T6784] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 191.779400][ T6760] loop2: p5 size 591360 extends beyond EOD, truncated [ 191.837758][ T6787] Cannot find add_set index 2 as target [ 191.883795][ T28] audit: type=1400 audit(1775498947.184:1925): avc: denied { create } for pid=6786 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 191.918416][ T6789] ip6gretap1: entered promiscuous mode [ 191.943010][ T6789] ip6gretap1: entered allmulticast mode [ 191.971633][ T28] audit: type=1400 audit(1775498947.184:1926): avc: denied { ioctl } for pid=6786 comm="syz.1.846" path="socket:[17079]" dev="sockfs" ino=17079 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.029273][ T6792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.061418][ T6792] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 192.076576][ T6792] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 192.090527][ T6792] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.090527][ T6792] [ 192.100715][ T6792] EXT4-fs (loop1): Total free blocks count 0 [ 192.106975][ T6792] EXT4-fs (loop1): Free/Dirty block details [ 192.113060][ T6792] EXT4-fs (loop1): free_blocks=2415919504 [ 192.119323][ T6792] EXT4-fs (loop1): dirty_blocks=16 [ 192.124754][ T6792] EXT4-fs (loop1): Block reservation details [ 192.130814][ T6792] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 192.137389][ T6802] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 192.218144][ T3313] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 192.257683][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 192.330805][ T28] audit: type=1400 audit(1775498947.614:1927): avc: denied { execute } for pid=6810 comm="syz.3.855" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 192.357221][ T28] audit: type=1400 audit(1775498947.624:1928): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 192.817736][ T6826] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.879005][ T6826] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.881165][ T6828] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.912960][ T6829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6829 comm=syz.3.859 [ 192.931190][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.943817][ T6828] EXT4-fs (loop2): 1 truncate cleaned up [ 192.951116][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.965951][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.982414][ T6826] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.025271][ T6826] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.038523][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.058014][ T6829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.075411][ T6829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.111818][ T6823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.126252][ T6823] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.157137][ T6826] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.167961][ T6826] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.238251][ T6826] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.248493][ T6826] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.305296][ T6841] netlink: 'syz.2.860': attribute type 3 has an invalid length. [ 194.313210][ T6841] netlink: 'syz.2.860': attribute type 3 has an invalid length. [ 194.519780][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.528405][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.559427][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.567862][ T50] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.593668][ T4953] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.608467][ T6845] set_capacity_and_notify: 4 callbacks suppressed [ 194.608485][ T6845] loop1: detected capacity change from 0 to 512 [ 194.613721][ T28] audit: type=1400 audit(1775498949.904:1929): avc: denied { setopt } for pid=6844 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.643583][ T4953] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.656369][ T4953] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.680556][ T4953] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.689490][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.699851][ T6845] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 194.712158][ T6845] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 194.725325][ T6849] loop0: detected capacity change from 0 to 2048 [ 194.733026][ T6845] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.863: Failed to acquire dquot type 1 [ 194.746253][ T6845] loop1: lost filesystem error report for type 5 error -117 [ 194.748108][ T6845] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 194.755510][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 194.755533][ C1] EXT4-fs (loop1): last error at time 1775498950: ext4_acquire_dquot:7026 [ 194.758789][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.766694][ T6845] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 194.811634][ T6845] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.863: Failed to acquire dquot type 1 [ 194.823353][ T6845] loop1: lost filesystem error report for type 5 error -117 [ 194.844712][ T6845] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.863: bg 0: block 248: padding at end of block bitmap is not set [ 194.867536][ T6845] loop1: lost filesystem error report for type 5 error -117 [ 194.868461][ T6845] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 194.885434][ T6845] loop1: lost filesystem error report for type 5 error -117 [ 194.885701][ T6845] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 194.904987][ T6845] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 194.915302][ T6845] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.863: Failed to acquire dquot type 1 [ 194.926661][ T6845] loop1: lost filesystem error report for type 5 error -117 [ 194.927052][ T6845] EXT4-fs (loop1): 1 orphan inode deleted [ 194.940824][ T6845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.953756][ T6845] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.993719][ T6849] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 195.008944][ T6849] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 195.021566][ T6849] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.021566][ T6849] [ 195.030790][ T6857] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.032816][ T6849] EXT4-fs (loop0): Total free blocks count 0 [ 195.044496][ T28] audit: type=1400 audit(1775498950.334:1930): avc: denied { rename } for pid=6847 comm="syz.0.864" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.050451][ T6849] EXT4-fs (loop0): Free/Dirty block details [ 195.078340][ T6849] EXT4-fs (loop0): free_blocks=66060288 [ 195.103585][ T6849] EXT4-fs (loop0): dirty_blocks=256 [ 195.106268][ T6857] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.106268][ T6857] [ 195.114407][ T6849] EXT4-fs (loop0): Block reservation details [ 195.123745][ T28] audit: type=1400 audit(1775498950.334:1931): avc: denied { unlink } for pid=6847 comm="syz.0.864" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 195.241757][ T3315] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 195.273003][ T6845] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.863: deleted inode referenced: 12 [ 195.289942][ T6863] loop5: detected capacity change from 0 to 2048 [ 195.304683][ T6845] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.863: deleted inode referenced: 12 [ 195.336034][ T6868] loop3: detected capacity change from 0 to 1024 [ 195.358311][ T6868] ext4: Unknown parameter 'dont_appraise' [ 195.397666][ T4152] Alternate GPT is invalid, using primary GPT. [ 195.404248][ T4152] loop5: p2 p3 p7 [ 195.426559][ T35] usb 7-1: enqueue for inactive port 0 [ 195.432086][ T35] usb 7-1: enqueue for inactive port 0 [ 195.497788][ T28] audit: type=1326 audit(1775498950.804:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97ff0ec819 code=0x0 [ 195.537666][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 195.649326][ T6874] loop0: detected capacity change from 0 to 512 [ 195.676081][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.707198][ T6875] loop3: detected capacity change from 0 to 128 [ 195.747330][ T6874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.761726][ T6874] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.781427][ T6874] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.813685][ T6863] Alternate GPT is invalid, using primary GPT. [ 195.822010][ T6875] vfat: Bad value for 'errors' [ 195.833254][ T6863] loop5: p2 p3 p7 [ 195.855118][ T6875] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 195.861685][ T6875] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.958491][ T6875] vhci_hcd vhci_hcd.0: Device attached [ 196.304059][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 196.545550][ T3002] Alternate GPT is invalid, using primary GPT. [ 196.578442][ T3002] loop5: p2 p3 p7 [ 197.019214][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 197.031097][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 197.041462][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 197.570308][ T6909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6909 comm=syz.5.879 [ 197.583854][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.594382][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.604452][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.613801][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.627803][ T6915] loop0: detected capacity change from 0 to 512 [ 197.653318][ T6915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.430670][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.450958][ T6920] loop0: detected capacity change from 0 to 512 [ 198.471354][ T6920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.484214][ T6880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.484468][ T6920] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.498975][ T6878] vhci_hcd: connection reset by peer [ 198.513874][ T204] vhci_hcd vhci_hcd.3: stop threads [ 198.519142][ T204] vhci_hcd vhci_hcd.3: release socket [ 198.531417][ T204] vhci_hcd vhci_hcd.3: disconnect device [ 198.599219][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.628938][ T6932] loop1: detected capacity change from 0 to 512 [ 198.655751][ T6932] netlink: 1 bytes leftover after parsing attributes in process `syz.1.888'. [ 198.759153][ T6938] loop0: detected capacity change from 0 to 1024 [ 198.771336][ T6938] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 198.791801][ T6938] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #3: block 1: comm syz.0.890: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.813673][ T6938] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.815875][ T3395] IPVS: starting estimator thread 0... [ 198.825006][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 198.825028][ C1] EXT4-fs (loop0): initial error at time 1775498954: ext4_map_blocks:828: inode 3: block 1 [ 198.825069][ C1] EXT4-fs (loop0): last error at time 1775498954: ext4_map_blocks:828: inode 3: block 1 [ 198.859649][ T6938] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.890: Failed to acquire dquot type 0 [ 198.871170][ T6938] loop0: lost filesystem error report for type 5 error -117 [ 198.871451][ T6938] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.890: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.892387][ T6938] loop0: lost filesystem error report for type 5 error -117 [ 198.904766][ T6938] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.890: Invalid inode bitmap blk 0 in block_group 0 [ 198.927295][ T204] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.935396][ T6938] loop0: lost filesystem error report for type 5 error -117 [ 198.941536][ T6946] FAT-fs (loop1): bogus sectors per cluster 0 [ 198.950013][ T204] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 198.966322][ T6946] FAT-fs (loop1): Can't find a valid FAT filesystem [ 198.973696][ T6944] IPVS: using max 2256 ests per chain, 112800 per kthread [ 198.989306][ T6938] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 198.989539][ T204] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 0 [ 199.013574][ T204] loop0: lost filesystem error report for type 5 error -117 [ 199.030115][ T6938] loop0: lost filesystem error report for type 5 error -117 [ 199.050715][ T6938] EXT4-fs (loop0): 1 orphan inode deleted [ 199.077234][ T6938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.094122][ T6950] netlink: 80 bytes leftover after parsing attributes in process `syz.5.894'. [ 199.098637][ T6938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.103022][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.894'. [ 199.344431][ T6968] batadv0: entered promiscuous mode [ 199.350904][ T6968] batadv0: left promiscuous mode [ 199.892101][ T6975] set_capacity_and_notify: 1 callbacks suppressed [ 199.892119][ T6975] loop1: detected capacity change from 0 to 8192 [ 199.998573][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.5.899'. [ 200.595660][ T4152] loop1: p1 < > p2 p4 < p5 > [ 200.600446][ T4152] loop1: partition table partially beyond EOD, truncated [ 200.805145][ T6981] loop3: detected capacity change from 0 to 8192 [ 200.817776][ T4152] loop1: p1 start 134217728 is beyond EOD, truncated [ 200.832538][ T4152] loop1: p2 size 591360 extends beyond EOD, truncated [ 200.855129][ T5126] loop3: p1 < > p2 p4 < p5 > [ 200.859979][ T5126] loop3: partition table partially beyond EOD, truncated [ 200.868070][ T4152] loop1: p5 size 591360 extends beyond EOD, truncated [ 200.871397][ T5126] loop3: p1 start 134217728 is beyond EOD, truncated [ 200.893574][ T5126] loop3: p2 size 591360 extends beyond EOD, truncated [ 200.911590][ T5126] loop3: p5 size 591360 extends beyond EOD, truncated [ 200.933575][ T6975] loop1: p1 < > p2 p4 < p5 > [ 200.938333][ T6975] loop1: partition table partially beyond EOD, truncated [ 200.945472][ T6975] loop1: p1 start 134217728 is beyond EOD, truncated [ 200.952229][ T6975] loop1: p2 size 591360 extends beyond EOD, truncated [ 200.960369][ T6975] loop1: p5 size 591360 extends beyond EOD, truncated [ 200.974425][ T6981] loop3: p1 < > p2 p4 < p5 > [ 200.979189][ T6981] loop3: partition table partially beyond EOD, truncated [ 200.986605][ T6981] loop3: p1 start 134217728 is beyond EOD, truncated [ 200.993407][ T6981] loop3: p2 size 591360 extends beyond EOD, truncated [ 201.004840][ T6981] loop3: p5 size 591360 extends beyond EOD, truncated [ 201.039682][ T6982] ip6tnl1: entered promiscuous mode [ 201.053764][ T6982] ip6tnl1: entered allmulticast mode [ 201.181144][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 201.181164][ T28] audit: type=1400 audit(1775498956.484:1933): avc: denied { execute } for pid=6961 comm="syz.0.896" path="/memory.swap.current" dev="ramfs" ino=18456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 201.216804][ T6993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6993 comm=syz.5.904 [ 201.311489][ T6994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.359331][ T6994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.384434][ T6991] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.424151][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.453701][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.525559][ T6991] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.593653][ T35] usb 7-1: enqueue for inactive port 0 [ 201.602129][ T35] usb 7-1: enqueue for inactive port 0 [ 201.609745][ T6991] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.629683][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 201.643030][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 201.655420][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 201.694165][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 201.706023][ T6991] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.778882][ T1787] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.847584][ T30] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.874452][ T30] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.937672][ T30] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.960270][ T7010] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 201.980851][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.118636][ T7014] loop0: detected capacity change from 0 to 512 [ 202.198393][ T7014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.213001][ T7014] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.233367][ T7014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.291306][ T7016] vlan2: entered promiscuous mode [ 202.335668][ T7016] bond0: entered promiscuous mode [ 202.381293][ T7016] vlan2: entered allmulticast mode [ 202.408404][ T7016] bond0: entered allmulticast mode [ 202.449275][ T7026] netlink: 14 bytes leftover after parsing attributes in process `syz.1.912'. [ 202.468166][ T7023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 203.466700][ T7031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.155315][ T7031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.297361][ T7026] loop1: detected capacity change from 0 to 512 [ 204.320226][ T7026] /dev/loop1: Can't open blockdev [ 204.525161][ T7040] loop0: detected capacity change from 0 to 512 [ 204.581948][ T7040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.596830][ T7040] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.615166][ T7040] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.878196][ T7046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.915'. [ 204.966222][ T7048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=7048 comm=syz.2.917 [ 205.047176][ T7049] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 205.055775][ T7050] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 205.196878][ T7053] loop2: detected capacity change from 0 to 8192 [ 205.275841][ T7054] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 205.634343][ T7054] FAT-fs (loop2): Filesystem has been set read-only [ 205.746164][ T7053] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 206.408350][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.923'. [ 206.630653][ T7073] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.651205][ T7075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7075 comm=syz.0.924 [ 206.860656][ T7076] loop2: detected capacity change from 0 to 512 [ 207.014638][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.023329][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.570385][ T7073] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.567151][ T7077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.076418][ T7077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.128934][ T7076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.142175][ T7076] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.157027][ T7076] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.621035][ T7086] loop1: detected capacity change from 0 to 8192 [ 209.730177][ T7073] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.980032][ T4152] loop1: p1 < > p2 p4 < p5 > [ 210.000723][ T4152] loop1: partition table partially beyond EOD, truncated [ 210.010411][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 210.039561][ T4152] loop1: p1 start 134217728 is beyond EOD, truncated [ 210.050480][ T7093] loop3: detected capacity change from 0 to 1024 [ 210.066352][ T7092] macsec2: entered promiscuous mode [ 210.071681][ T4152] loop1: p2 size 591360 extends beyond EOD, truncated [ 210.080068][ T4152] loop1: p5 size 591360 extends beyond EOD, truncated [ 210.080169][ T7093] ext4: Unknown parameter 'dont_appraise' [ 210.093100][ T7092] gretap0: entered promiscuous mode [ 210.102675][ T7086] loop1: p1 < > p2 p4 < p5 > [ 210.107441][ T7086] loop1: partition table partially beyond EOD, truncated [ 210.114375][ T7092] macsec2: entered allmulticast mode [ 210.114869][ T7086] loop1: p1 start 134217728 is beyond EOD, truncated [ 210.123584][ T7092] gretap0: entered allmulticast mode [ 210.126548][ T7086] loop1: p2 size 591360 extends beyond EOD, truncated [ 210.129382][ T7086] loop1: p5 size 591360 extends beyond EOD, truncated [ 210.274638][ T7092] gretap0: left allmulticast mode [ 210.295775][ T7092] gretap0: left promiscuous mode [ 210.325386][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 210.336870][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 210.346971][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 210.375116][ T7073] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.408084][ T5126] udevd[5126]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 210.415394][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 210.429036][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 210.483636][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.493133][ T7100] loop2: detected capacity change from 0 to 256 [ 210.512646][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.570313][ T28] audit: type=1400 audit(1775498965.874:1934): avc: denied { ioctl } for pid=7104 comm="syz.3.933" path="socket:[18327]" dev="sockfs" ino=18327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 210.602834][ T1787] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.618293][ T1787] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.632640][ T7110] loop3: detected capacity change from 0 to 1024 [ 210.657976][ T7108] netlink: 14 bytes leftover after parsing attributes in process `syz.1.934'. [ 210.659747][ T28] audit: type=1326 audit(1775498965.934:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.2.935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f440ee9c819 code=0x0 [ 210.693736][ T7114] loop2: detected capacity change from 0 to 128 [ 210.700492][ T7114] vfat: Bad value for 'errors' [ 210.724005][ T7110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.737458][ T7114] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 210.744013][ T7114] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 210.760680][ T7114] vhci_hcd vhci_hcd.0: Device attached [ 210.797152][ T7116] loop1: detected capacity change from 0 to 8192 [ 210.911721][ T7115] vhci_hcd: cannot find a urb of seqnum 4294967291 max seqnum 0 [ 210.919686][ T7044] vhci_hcd vhci_hcd.2: stop threads [ 210.926123][ T7044] vhci_hcd vhci_hcd.2: release socket [ 210.933355][ T7044] vhci_hcd vhci_hcd.2: disconnect device [ 210.943580][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 210.963722][ T7108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.982418][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.994469][ T7108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.101379][ T7129] loop5: detected capacity change from 0 to 512 [ 211.275928][ T7129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.290328][ T7129] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.310443][ T7129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.122376][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 212.156451][ T7144] gretap0: entered promiscuous mode [ 212.163906][ T7144] macsec1: entered promiscuous mode [ 212.169196][ T7144] macsec1: entered allmulticast mode [ 212.175132][ T7144] gretap0: entered allmulticast mode [ 212.273456][ T28] audit: type=1400 audit(1775498967.574:1936): avc: denied { read } for pid=7142 comm="syz.2.943" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.323812][ T28] audit: type=1400 audit(1775498967.574:1937): avc: denied { open } for pid=7142 comm="syz.2.943" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.373416][ T28] audit: type=1400 audit(1775498967.624:1938): avc: denied { create } for pid=7142 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 212.453118][ T28] audit: type=1400 audit(1775498967.754:1939): avc: denied { ioctl } for pid=7142 comm="syz.2.943" path="/newroot/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 212.506773][ T28] audit: type=1400 audit(1775498967.794:1940): avc: denied { sys_admin } for pid=7142 comm="syz.2.943" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 212.799976][ T7151] loop1: detected capacity change from 0 to 512 [ 212.812366][ T7144] gretap0: left allmulticast mode [ 212.820868][ T7144] gretap0: left promiscuous mode [ 212.842526][ T7151] vfat: Unknown parameter 'ÿÿ [ 212.842526][ T7151] ' [ 212.934869][ T7160] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.947847][ T7160] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.971962][ T7168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7168 comm=syz.3.946 [ 212.996509][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.020290][ T7160] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.024409][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.063239][ T7160] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.066092][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.087869][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.135319][ T7160] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.153640][ T7160] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.173625][ T28] audit: type=1326 audit(1775498968.474:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c65ec819 code=0x7ffc0000 [ 213.209025][ T7179] batadv_slave_1: mtu less than device minimum [ 213.245850][ T28] audit: type=1326 audit(1775498968.474:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7c65ec819 code=0x7ffc0000 [ 213.276149][ T7160] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.290133][ T7160] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.310465][ T28] audit: type=1326 audit(1775498968.474:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.1.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c65ec819 code=0x7ffc0000 [ 213.368354][ T7184] lo speed is unknown, defaulting to 1000 [ 213.381667][ T1787] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.392197][ T7187] loop5: detected capacity change from 0 to 512 [ 213.396254][ T1787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.478426][ T1787] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.491009][ T7187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.514038][ T1787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.541974][ T1787] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.550635][ T7187] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.563831][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 213.593477][ T1787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.648155][ T7203] gretap0: entered promiscuous mode [ 213.653744][ T7203] macsec1: entered promiscuous mode [ 213.659192][ T7203] macsec1: entered allmulticast mode [ 213.665854][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.665929][ T7203] gretap0: entered allmulticast mode [ 213.687449][ T7203] gretap0: left allmulticast mode [ 213.703636][ T7203] gretap0: left promiscuous mode [ 213.710094][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.959'. [ 213.737633][ T1787] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.765691][ T1787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.962657][ T7206] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 214.300276][ T7228] loop0: detected capacity change from 0 to 8192 [ 214.381737][ T7236] loop3: detected capacity change from 0 to 256 [ 214.388430][ T7228] loop0: p1 < > p2 p4 < p5 > [ 214.393291][ T7228] loop0: partition table partially beyond EOD, truncated [ 214.400675][ T7228] loop0: p1 start 134217728 is beyond EOD, truncated [ 214.407416][ T7228] loop0: p2 size 591360 extends beyond EOD, truncated [ 214.415523][ T7228] loop0: p5 size 591360 extends beyond EOD, truncated [ 214.463044][ T7233] netlink: 'syz.5.966': attribute type 15 has an invalid length. [ 214.490214][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 214.501462][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 214.513432][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 214.538052][ T7239] loop0: detected capacity change from 0 to 512 [ 214.554851][ T7233] netlink: 666 bytes leftover after parsing attributes in process `syz.5.966'. [ 214.585548][ T7239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.608477][ T7236] bond1: peer notification delay (2048) is not a multiple of miimon (100), value rounded to 2000 ms [ 214.640492][ T7239] ext4 filesystem being mounted at /218/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.661307][ T7236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.709842][ T7239] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz.0.969: invalid size [ 214.762622][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.050898][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.972'. [ 215.107544][ T7249] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 215.124990][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 215.176572][ T7251] macsec2: entered promiscuous mode [ 215.183538][ T7251] gretap0: entered promiscuous mode [ 215.199422][ T7251] macsec2: entered allmulticast mode [ 215.213715][ T7251] gretap0: entered allmulticast mode [ 215.234925][ T7251] gretap0: left allmulticast mode [ 215.253580][ T7251] gretap0: left promiscuous mode [ 215.400648][ T7258] lo speed is unknown, defaulting to 1000 [ 215.451528][ T7265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.505591][ T7270] set_capacity_and_notify: 2 callbacks suppressed [ 215.505611][ T7270] loop1: detected capacity change from 0 to 8192 [ 215.565241][ T7267] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.604213][ T3306] loop1: p1 < > p2 p4 < p5 > [ 215.610548][ T3306] loop1: partition table partially beyond EOD, truncated [ 215.623877][ T4608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.634199][ T7267] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.661008][ T3306] loop1: p1 start 134217728 is beyond EOD, truncated [ 215.693862][ T7277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7277 comm=syz.3.978 [ 215.709914][ T3306] loop1: p2 size 591360 extends beyond EOD, truncated [ 215.727389][ T3306] loop1: p5 size 591360 extends beyond EOD, truncated [ 215.746486][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.776928][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.801815][ T7267] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.816441][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.828057][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.836602][ T7267] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.975451][ T7267] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.987511][ T7267] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.124724][ T7270] loop1: p1 < > p2 p4 < p5 > [ 216.129649][ T7270] loop1: partition table partially beyond EOD, truncated [ 216.136857][ T7270] loop1: p1 start 134217728 is beyond EOD, truncated [ 216.143725][ T7270] loop1: p2 size 591360 extends beyond EOD, truncated [ 216.153277][ T7270] loop1: p5 size 591360 extends beyond EOD, truncated [ 216.162639][ T7267] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.203601][ T7267] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.353647][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 216.353665][ T28] audit: type=1400 audit(1775498971.654:1973): avc: denied { nlmsg_read } for pid=7298 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 217.621397][ T7305] loop5: detected capacity change from 0 to 512 [ 218.001605][ T7306] loop2: detected capacity change from 0 to 512 [ 218.357757][ T7310] xt_connbytes: Forcing CT accounting to be enabled [ 218.367105][ T28] audit: type=1400 audit(1775498972.684:1974): avc: denied { bind } for pid=7298 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.617913][ T7310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.645569][ T7305] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 219.645571][ T7306] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 219.645916][ T7306] ================================================================== [ 219.656960][ T7306] BUG: KCSAN: data-race in data_push_tail / string [ 219.657002][ T7306] [ 219.657009][ T7306] write to 0xffffffff893aa700 of 1 bytes by task 7305 on cpu 1: [ 219.657029][ T7306] string+0x187/0x220 [ 219.657061][ T7306] vsnprintf+0x532/0x860 [ 219.657100][ T7306] vscnprintf+0x41/0x90 [ 219.657134][ T7306] printk_sprint+0x30/0x2e0 [ 219.657154][ T7306] vprintk_store+0x57b/0x910 [ 219.657175][ T7306] vprintk_emit+0x1a4/0x600 [ 219.657195][ T7306] vprintk_default+0x26/0x30 [ 219.657217][ T7306] vprintk+0x1d/0x30 [ 219.657245][ T7306] _printk+0x79/0xa0 [ 219.657265][ T7306] __ext4_warning+0x139/0x150 [ 219.657290][ T7306] ext4_multi_mount_protect+0x5d7/0x600 [ 219.657317][ T7306] ext4_fill_super+0x22f2/0x37c0 [ 219.657343][ T7306] get_tree_bdev_flags+0x291/0x300 [ 219.657364][ T7306] get_tree_bdev+0x1f/0x30 [ 219.657384][ T7306] ext4_get_tree+0x1c/0x30 [ 219.657406][ T7306] vfs_get_tree+0x57/0x1d0 [ 219.657425][ T7306] do_new_mount+0x288/0x8d0 [ 219.657449][ T7306] path_mount+0x4d0/0xbc0 [ 219.657471][ T7306] __se_sys_mount+0x28c/0x2e0 [ 219.657496][ T7306] __x64_sys_mount+0x67/0x80 [ 219.657521][ T7306] x64_sys_call+0x2d61/0x3020 [ 219.657551][ T7306] do_syscall_64+0x12c/0x370 [ 219.657579][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.657603][ T7306] [ 219.657610][ T7306] read to 0xffffffff893aa700 of 8 bytes by task 7306 on cpu 0: [ 219.657628][ T7306] data_push_tail+0x100/0x470 [ 219.657648][ T7306] data_alloc+0x11b/0x390 [ 219.657682][ T7306] prb_reserve+0x8d7/0xae0 [ 219.657716][ T7306] vprintk_store+0x54a/0x910 [ 219.657737][ T7306] vprintk_emit+0x1a4/0x600 [ 219.657758][ T7306] vprintk_default+0x26/0x30 [ 219.657780][ T7306] vprintk+0x1d/0x30 [ 219.657808][ T7306] _printk+0x79/0xa0 [ 219.657828][ T7306] __ext4_warning+0x139/0x150 [ 219.657852][ T7306] ext4_multi_mount_protect+0x5d7/0x600 [ 219.657879][ T7306] ext4_fill_super+0x22f2/0x37c0 [ 219.657903][ T7306] get_tree_bdev_flags+0x291/0x300 [ 219.657924][ T7306] get_tree_bdev+0x1f/0x30 [ 219.657943][ T7306] ext4_get_tree+0x1c/0x30 [ 219.657965][ T7306] vfs_get_tree+0x57/0x1d0 [ 219.657985][ T7306] do_new_mount+0x288/0x8d0 [ 219.658008][ T7306] path_mount+0x4d0/0xbc0 [ 219.658030][ T7306] __se_sys_mount+0x28c/0x2e0 [ 219.658055][ T7306] __x64_sys_mount+0x67/0x80 [ 219.658087][ T7306] x64_sys_call+0x2d61/0x3020 [ 219.658117][ T7306] do_syscall_64+0x12c/0x370 [ 219.658144][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.658168][ T7306] [ 219.658174][ T7306] value changed: 0x00000000ffffe75d -> 0x6e55203a3439333a [ 219.658188][ T7306] [ 219.658194][ T7306] Reported by Kernel Concurrency Sanitizer on: [ 219.658210][ T7306] CPU: 0 UID: 0 PID: 7306 Comm: syz.2.986 Tainted: G W syzkaller #0 PREEMPT(full) [ 219.658243][ T7306] Tainted: [W]=WARN [ 219.658253][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 219.658268][ T7306] ================================================================== [ 220.269050][ T1787] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.277427][ T1787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.289158][ T1787] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.297698][ T1787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.313674][ T1787] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.321905][ T1787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.342697][ T1787] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.351074][ T1787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0