last executing test programs: 6m9.15401643s ago: executing program 32 (id=153): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[], 0x4, 0x7dc, &(0x7f0000002a00)="$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") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x6, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x5509, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000100)) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fffffff3180100006400000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 3m17.382954773s ago: executing program 33 (id=1680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0401000000000000200012800b000100697036746e6c000010000280060012004e20000004001300080023000600007b08000a002f"], 0x50}, 0x1, 0x0, 0x0, 0x2400c081}, 0x4000) 2m19.22565591s ago: executing program 1 (id=2218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x5, 0x65, 0x1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x1, 0x7e, 0x69db}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0xa}, @exit, @ringbuf_query, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x7, 0x1, 0x8, 0x2, 0x8, 0xffffffffffffffe0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xfd, &(0x7f00000004c0)=""/253, 0x41100, 0x4e, '\x00', r7, @fallback=0x2, r8, 0x8, &(0x7f0000000780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0xffff8001, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000800), &(0x7f0000000840)=[{0x1, 0x3, 0x9, 0x8}, {0x0, 0x4, 0xa, 0x7}, {0x3, 0x4, 0x10, 0x6}], 0x10, 0x6}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 2m17.843348672s ago: executing program 1 (id=2230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0xffffffffffffffec}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000) splice(r3, 0x0, r2, 0x0, 0x100000000001, 0x0) sendfile(r2, r3, 0x0, 0x20000005) perf_event_open(&(0x7f0000000100)={0x36bb2711d4c921dc, 0x80, 0x67, 0x9, 0x1, 0x6, 0x0, 0xffffffff, 0x408, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7bbe, 0x1, @perf_config_ext={0x8, 0x3}, 0x1, 0x910, 0x0, 0x6, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x0, 0x7}, r1, 0x4, r2, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000100000000a00000108000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a00ffff0900010073797a3100000000300004802c000180090001007866726d000000001c0002800800024000000006080001400000000e05000300020000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 2m15.858980137s ago: executing program 1 (id=2239): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) lseek(r0, 0x7ff, 0x3) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @flow_dissector}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20980, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000000c0)={0x7, 0x5, 0xe0f}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2d, 'hugetlb'}, {0x2d, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'net_cls'}, {0x2d, 'devices'}]}, 0x3e) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, 0x0, &(0x7f0000000740)=r1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={0x0, 0x0, 0x8}, 0x18) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x58) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(0x0) close(0x3) 2m14.933622798s ago: executing program 1 (id=2249): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000280)={[{@block_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nombcache}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) (async) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) (async) fallocate(r0, 0x0, 0x0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfe, 0x4, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000858}, 0x40000010) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) read$usbmon(r7, &(0x7f0000000200)=""/147, 0x93) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, 0x1e, 0x21, 0x70bd29, 0x0, {0x1f}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xf, 0x0, 0x1, [@typed={0x4, 0xb6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) (async) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000004000/0x4000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000004000/0x4000)=nil) mlock(&(0x7f000035d000/0xb000)=nil, 0xb000) (async) mlock(&(0x7f000035d000/0xb000)=nil, 0xb000) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 2m14.581542569s ago: executing program 1 (id=2254): io_uring_enter(0xffffffffffffffff, 0x275c, 0x6e9a, 0xc, &(0x7f0000000000)={[0x2]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m14.359947968s ago: executing program 1 (id=2263): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800001, 0x3fff8005}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRESDEC=r0, @ANYBLOB="000000000100"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r1, &(0x7f0000000200)=""/193, 0xc1, 0x0, &(0x7f0000000000)=@ethernet={0x306, @multicast}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_io_uring_setup(0x7209, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x1, 0xc5, 0x0, r1}, &(0x7f00000004c0), &(0x7f0000000700)) io_uring_enter(r3, 0x58, 0x271e, 0x21, &(0x7f0000000780)={[0x80]}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7fffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) getsockname(r1, &(0x7f0000000600)=@rc={0x1f, @fixed}, &(0x7f0000000340)=0x80) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, r6, 0x325, 0xffffffff, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x5, 0x7fff, 0x0, 0x8}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r7, &(0x7f0000001180)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x97, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x8, @private0, 0x789e714f}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="480000000000000029000000360000006c0500000000000005020001c910fc00000000000000000000000000000107100000000202060d00000000000000000004010200000000001400000000000000290000000b000000000000030000000024"], 0x88}}], 0x2, 0x4004800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) 2m14.325954871s ago: executing program 34 (id=2263): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800001, 0x3fff8005}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRESDEC=r0, @ANYBLOB="000000000100"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r1, &(0x7f0000000200)=""/193, 0xc1, 0x0, &(0x7f0000000000)=@ethernet={0x306, @multicast}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_io_uring_setup(0x7209, &(0x7f0000000680)={0x0, 0x4, 0x0, 0x1, 0xc5, 0x0, r1}, &(0x7f00000004c0), &(0x7f0000000700)) io_uring_enter(r3, 0x58, 0x271e, 0x21, &(0x7f0000000780)={[0x80]}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7fffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) getsockname(r1, &(0x7f0000000600)=@rc={0x1f, @fixed}, &(0x7f0000000340)=0x80) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, r6, 0x325, 0xffffffff, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x5, 0x7fff, 0x0, 0x8}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r7, &(0x7f0000001180)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x97, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x8, @private0, 0x789e714f}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="480000000000000029000000360000006c0500000000000005020001c910fc00000000000000000000000000000107100000000202060d00000000000000000004010200000000001400000000000000290000000b000000000000030000000024"], 0x88}}], 0x2, 0x4004800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) 2m11.213060176s ago: executing program 6 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a0108000000f5ffffff00020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) 2m10.93392464s ago: executing program 6 (id=2293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={r9, 0x5, 0x1, [0x40]}, 0xa) sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0) 2m10.012510671s ago: executing program 6 (id=2296): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000844}, 0x200000c4) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x9}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xffffff00}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063115f000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000000, 0x200000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x2e, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x50, @remote, 0x3}, r7}}, 0x30) r8 = epoll_create1(0x80000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000880)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_ACTIVATE(r9, 0x5606, 0xe06) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x4d, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) close(r10) r11 = syz_io_uring_setup(0x7bc7, &(0x7f0000000680)={0x0, 0x9a5e, 0x200, 0x3, 0x1cd}, &(0x7f0000000280), &(0x7f0000000400)) io_uring_enter(r11, 0x7173, 0xf1c0, 0x10, &(0x7f0000000540)={[0x97]}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) 2m9.053131146s ago: executing program 6 (id=2303): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setfsgid(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r5, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) (async) ptrace(0x10, r0) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8080c61) (async) wait4(r0, 0x0, 0x20000000, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r6, &(0x7f0000000c40)=[{0x0, 0x300}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x3, [@func={0xb, 0x0, 0x0, 0xc, 0x4}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x80000000, [{0xd, 0x5, 0x5}, {0x1, 0x4, 0xf8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0xf}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x80}}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x0, [{0x3, 0x8, 0x854}]}]}, {0x0, [0x51]}}, &(0x7f0000000100)=""/151, 0xab, 0x97, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m8.756215731s ago: executing program 6 (id=2304): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x4008044) 2m8.289735263s ago: executing program 6 (id=2309): clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x80, 0xfffffffffffffffe, 0x0, 0x4b, 0xf4, 0x0, 0x0, 0xa13, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x1, 0x7e28, 0x200000000000000, 0x0, 0x0, 0xeff, 0x2, 0x0, 0x0, 0x40000, 0x0, 0x80000000000000}) 2m8.233871328s ago: executing program 35 (id=2309): clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x80, 0xfffffffffffffffe, 0x0, 0x4b, 0xf4, 0x0, 0x0, 0xa13, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x1, 0x7e28, 0x200000000000000, 0x0, 0x0, 0xeff, 0x2, 0x0, 0x0, 0x40000, 0x0, 0x80000000000000}) 1m46.904191894s ago: executing program 8 (id=2488): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b70000008ef30000bca31000000000002403000030feffff720af0ffa4ffffff91a4f0ff000000001f030000000000002e140200000000002604fdffa4ffffff14010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baaa244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b7025488316241f64c851a7fe7396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010fcdb9913823333a70c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 1m46.886809916s ago: executing program 8 (id=2491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2000, 0x5}, 0x0) 1m45.988127785s ago: executing program 8 (id=2497): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRES16=r2], 0x15) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000300)=0x6e) getpeername$unix(r5, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1m45.676161533s ago: executing program 8 (id=2504): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000100), 0x8) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x2a, 0x0, @void}, 0x10) (async) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1m45.528105895s ago: executing program 8 (id=2507): r0 = socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x1, 0x336, &(0x7f0000000e00)="$eJzs3cFrI1UcB/DfxrXdXe2mBxEUxIde9DK09R8wyC6IBaVuZfUgzNqphswmJRNWsoi7N/Hm37F49CaI4LkX79689eJxD4uRJm23ienBhTSWfD4Q3i/z8mXeJEz4XZJ3cPuHu63dKtvNe1F7N8XViKg9jliNWhy7dDTWhvVSnPYw3q7f/uO1jz/97IPG5uaNrZRuNm69s5FSuv76L19/8+Mbv/Ze+OSn6z8vx/7q5wd/bfy5//L+Kwd/3/qqWaVmldqdXsrTnU6nl98pi7TTrFpZSh+VRV4Vqdmuiu7Y/G7Z2dvrp7y9s3Jtr1tUVcrb/dQq+qnXSb1uP+Vf5s12yrIsrVyLxfIs17v9aGsrb8xgMZyj7ycPXB1/2u028sN7ePlfye1HM10YAPC/NNn/1+LK8Pic+v/jFuW/9/+XFr3/fxb6/0Vw2P8vHd2/4/T/AAAAAAAAAAAAAABwETweDOqDwaB+PE4+5r0+Zsvnv9hO/XDvSkT53b3te9ujcTTf2I1mlFHEWtTjScTgxKi++f7mjbU0tBordx+M8ofjc+P59ajH6vT8ekpp8CCl8fzzw3+0OMlvRD1emp7fGJ1/Ir8Ub715Kp9FPX7/IjpRxk4cZp/mv11P6b0PNyfyy8PXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAYsnRi6v79WXbW/Ch/sr/+WtTjyfT9+dem7s9/OV69PN9rBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBjVf9+Ky/Lonv+xcM4Y2pwZF4LO/8iYman+O3FOOt9VijOLub9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNU9e+38rIsujMs5n2NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8k/AQAA//8A7ioD") ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) socket(0x10, 0x3, 0x6) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a004e0000000000ff0100e8ffffffffffffff00000000010000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) 1m42.947998652s ago: executing program 8 (id=2523): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000009e6b4a20000000000000008000000000000000000000000000000000000000000000000000000000020000100004d1424ccae6f0000000000090000000000000080000000000000000000000000000000000000000000000000010003000000008400050064010102000000000000000000000000001004d4340000000000000023080000000000000000000000f0ffff0535000000000200000000000000000000000000fe8000000000000000000000000000bb000004d533000000000000000a0101010000000000000000000000000435"], 0x13c}}, 0x4080) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x3, 0x1, 0xd, 0x0, 0xb0, 0xc0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd37f, 0xe000000}, 0x1000, 0x4, 0x98, 0x2, 0x15, 0x8000, 0xd98, 0x0, 0x1, 0x0, 0xd6b5}, 0x0, 0x7, r2, 0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x19, 0x7, 0xfd, 0x4a, 0x0, 0x7, 0x2d30, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40}, 0x3221, 0x5, 0x3ff, 0x8, 0x5, 0x2, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r3, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) eventfd(0x5000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0xf62c, 0x800, 0x3, 0x30c}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r9 = syz_open_pts(r5, 0x20800) r10 = dup(r9) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x10, 0x4008, 0x0, 0x3, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0x4004550d, 0x0) 1m27.706660623s ago: executing program 36 (id=2523): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000f7fb20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000009e6b4a20000000000000008000000000000000000000000000000000000000000000000000000000020000100004d1424ccae6f0000000000090000000000000080000000000000000000000000000000000000000000000000010003000000008400050064010102000000000000000000000000001004d4340000000000000023080000000000000000000000f0ffff0535000000000200000000000000000000000000fe8000000000000000000000000000bb000004d533000000000000000a0101010000000000000000000000000435"], 0x13c}}, 0x4080) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x3, 0x1, 0xd, 0x0, 0xb0, 0xc0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd37f, 0xe000000}, 0x1000, 0x4, 0x98, 0x2, 0x15, 0x8000, 0xd98, 0x0, 0x1, 0x0, 0xd6b5}, 0x0, 0x7, r2, 0x2) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x19, 0x7, 0xfd, 0x4a, 0x0, 0x7, 0x2d30, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40}, 0x3221, 0x5, 0x3ff, 0x8, 0x5, 0x2, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r3, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) eventfd(0x5000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000200), 0x11, 0x553, &(0x7f0000001080)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0xf62c, 0x800, 0x3, 0x30c}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r9 = syz_open_pts(r5, 0x20800) r10 = dup(r9) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x10, 0x4008, 0x0, 0x3, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0x4004550d, 0x0) 1m26.980094838s ago: executing program 5 (id=2617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}}}]}]}, 0x8c}, 0x1, 0x0, 0x3a00, 0x10}, 0x0) 1m26.979936127s ago: executing program 5 (id=2618): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x110, r0, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_DOMAIN={0xcb, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcy\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93\x00\x00\x00\x00\x00\x00\x00\x007y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x110}, 0x1, 0x0, 0x0, 0xa00}, 0x8800) 1m26.913216513s ago: executing program 5 (id=2621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="040083000000", 0x0, 0x1, 0x10002, 0x0, 0x0}) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x6, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x33}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x72d, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) r6 = epoll_create1(0x0) io_setup(0xbf3, &(0x7f0000000000)=0x0) io_pgetevents(r7, 0x8000023, 0x800000000000087, &(0x7f00000001c0), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f00000002c0), 0x8}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000380)={0x30000005}) r9 = epoll_create(0xaf2) epoll_pwait(r9, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000080)={0xe000200f}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 1m26.371656561s ago: executing program 5 (id=2625): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f00000000c0)={[{@cruft}, {@check_relaxed}, {@nojoliet}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x54d, &(0x7f0000000580)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x10}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c041}, 0x200088c4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xfffe}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x42}}]}, 0xffffffffffffffbd}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x3}}], 0x18}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "a0f3a80294cf58e1", "9d55fd4f13b813f2b6f897f600741d51", "2aa8d90a", "d16b00"}, 0x28) 1m25.610174588s ago: executing program 5 (id=2628): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000a40)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaG?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6\a\x00\x00\x00\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00Q\x00\x00\x00\x00\x00\x00\x00\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\x9f\xadrY_1\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x6, 0x2, 0x7, 0x1, 0x7, 0x3, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x1}}, 0x2, 0x5, 0xfffd, 0x80000001, 0x207a2}}, &(0x7f0000000000)=0xb0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r6, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x10}}], 0x1, 0x45) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx={0x18, 0x1, 0x0, 0x0, 0x256c6c78, 0x0, 0x0, 0x13}, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.657248887s ago: executing program 7 (id=3305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="040083000000", 0x0, 0x1, 0x10002, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x72d, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000380)={0x30000005}) r4 = epoll_create(0xaf2) epoll_pwait(r4, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0xe000200f}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 12.650717627s ago: executing program 38 (id=3305): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffd, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="040083000000", 0x0, 0x1, 0x10002, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x72d, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000380)={0x30000005}) r4 = epoll_create(0xaf2) epoll_pwait(r4, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0xe000200f}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 4.906405978s ago: executing program 2 (id=3364): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x10000045) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100a9bd7000fddbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x8042) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="000427bd7000fbdbdf2501000000140005002001000000000000000000000000000008000800e0000002"], 0x30}}, 0x4000004) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/connector\x00') read$eventfd(r8, &(0x7f0000000280), 0x8) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x83, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x3fff8000}, 0x0, 0x20000032, 0x43a1bd76, 0x3, 0x9, 0x6, 0xffff, 0x0, 0x100, 0x0, 0x8ff}, r4, 0xa, r8, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000140)=0x6, 0x4) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000340)={0x60, 0x3, &(0x7f0000008000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, 0x6, &(0x7f0000000180)=[{0x1eb, 0x6, 0x300}, {0xdc9b, 0x800, 0x8001}, {0x4, 0xdc, 0x8}], 0x3, 0x3, 0x10, 0x61, 0x10, 0x8}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.676322306s ago: executing program 2 (id=3367): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x12}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x3b, 0x0, 0x1}, 0x28) 3.558697417s ago: executing program 2 (id=3369): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000540)={[], [{@smackfsdef={'smackfsdef', 0x3d, '{'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x35, 0x32, 0x33, 0x36, 0xf69a72b371ece53a, 0x63, 0x36], 0x2d, [0x65, 0x66, 0x63, 0x36], 0x2d, [0x39, 0x64, 0x36, 0x39], 0x2d, [0x33, 0x35, 0x61, 0x38], 0x2d, [0x36, 0x62, 0x38, 0x37, 0x33, 0x66, 0x62, 0x65]}}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '/)'}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x71) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') fchdir(r4) write(r1, &(0x7f0000000340)="5dc442cac228e52445f73818c48de1237f0a3393fe7096d65b17e20c9f43d665087c744988b9a87fd13502b2082b17016daff16d3f8983472754911a38941923150a307d0bd201345a5aa5f00c6c39f36abd4beef747b1f6a0a8ca4e8e1bf3e176a4db04b227b13766099ecbb5ec9ec8503346e7600fbddef48a1d39e66a1367632e266ade4ab1fd9724d1e60e473045e9cd419cc4b30353275d06df3f699dbed268ae33f2a78b77cab301aa9aa5cc17e1e680bcbe86efc837de4e1ad5132d94538030e40e4c0784a6afb94fc1715e16075ea3e1a4", 0xd5) exit(0x3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) link(&(0x7f0000000000)='./file1\x00', 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xcb, 0x29, 0x2, {0x9, [{{0x2, 0x2, 0x5}, 0x9091, 0xa, 0xd, './file1/file0'}, {{0x8, 0x4, 0x2}, 0x5, 0x7, 0x7, './file1'}, {{0x80, 0x3, 0x5}, 0x8000000000000000, 0x1d, 0x7, './file2'}, {{0x8, 0x4, 0x1}, 0x4, 0x61, 0x7, './file0'}, {{0x40, 0x2, 0x8}, 0x5d23, 0x2, 0x7, './file1'}, {{0x0, 0x2, 0x3}, 0xe38, 0x8, 0x7, './file1'}]}}, 0xcb) sendfile(r1, r1, 0x0, 0xe3aa6ea) 3.497337502s ago: executing program 4 (id=3370): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x44, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x1b1001, 0x50, 0x38}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll, 0x0, 0x80800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000000000003950323030302e4c00000000009b"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.431047678s ago: executing program 3 (id=3371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000300000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r8 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000740)='./file0\x00', 0x2, 0x3) stat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r10) sendmsg$IEEE802154_LIST_IFACE(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0100a9bd7000fddbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x8042) ioprio_get$uid(0x3, r9) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd70000000000500000000774bb0dbd2560882b5b4d0ddca7327a603f56adced323ad67309d6ac46618496b7", @ANYRES32=0x0, @ANYBLOB="0118020003110000200012800b00010065727370616e000010000280040012000500160001000000"], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) socket$kcm(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 3.327311427s ago: executing program 9 (id=3373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d3000fc000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.1881225s ago: executing program 9 (id=3374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x258, 0x2e8, 0x2e8, 0x258, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connlabel={{0x28}, {0xff, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x1, 0xfffff800}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x7b9, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x800000000000000}}, {0x28}}}}, 0x388) 3.18194307s ago: executing program 9 (id=3375): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x0, 0xfffffffc, 0x1, 0x9a, "58ef65941166ff64ae1e6ceca0d94c931a90f4", 0x4, 0x5}) 3.126653205s ago: executing program 9 (id=3376): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000160000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002ff8002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 3.07312257s ago: executing program 9 (id=3377): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x8084, &(0x7f0000000000)=ANY=[], 0x1, 0x16b, &(0x7f0000000180)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca0200000000000000adcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d070490893616810a121ff4feedd1d176b313b9fc7bf31ddff431a4a50760ce18a76c4b7aa73cec3eec984c76d16f798c436410f3f4a41715e736a132c3cb9421be0b3c2bd40b75896c007fa2d47e3d8392d905d582b8eff689b0f493770c91e8c2e8bd0b08ffa4fd0289b04b0ea024768d196ef721314d68d29988b01871c6ea39f95a0b77744caadd24867acab274e8e4bf3fb44df31e15ffdce52f9f60ffe"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r1, r2, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.669905995s ago: executing program 4 (id=3378): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050026bd700000000000220000000a000100777061e216f2"], 0x20}}, 0x2000c094) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf25270000000c0005000202aaaaaaaaaaaa0c0005000203aaaaaaaaaaaa0a000100777070616e3400000075ebe81c968dbf3d4b81eeaddb10fb597a78e6b5de6389242b6d5ea1e6bb1b93cea0fa87ae7b3c48aa40e61a37e46208362201d7fff854e107440a0794993fc6a16837835e7d84ee9763ab78000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004094) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = msgget$private(0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x1, 0x1000) msgctl$IPC_RMID(r6, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf251b00000008000300", @ANYRES32=r4, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x4008044) 2.631287039s ago: executing program 2 (id=3379): eventfd(0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@abort}, {@nodelalloc}]}, 0x1, 0x25f, &(0x7f0000000380)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfTSYoSY4M148uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFzZnQ3knyZmNzvifD6w2ZnJm/d7w8z3TQiZbACF1RcRQxFRioj+iKhERLK+wefZq6+5OtO9MBZRq/3yMGm0y9Yza/v1RsR0RHwXEfNpEv+VI6bm/lh+vPjTV8cnK1+em/u9u6MH2bSyvPTz6tmRYxeHv526fvP+SBJDUd1wXO2XbLOtnER8sB/F3hBJOe8RsBujhy/cquf+w4j4opH/SqSRnbwTE+/MV+KbMy/b9+SDGx93cqxA+9Vqlfo9cLoGFE4aEdVI0oGIyJbTdGAg+xn+dqkn/X984lD/v+OTB/7Je6YC2qUasfTj5a5LvZvyf6+U5R94S2W/lFr6dXT2Tn1htZT3gICO+CR7q9//+/868nXIPxSO/ENxyT8Ul/xDcck/FJf8Q3HJPxTE8+Yf+63bJP9QXPIPxbXn/J96tn+DAjpiff4BgGKpde3pqeH2PoQM5CLv+QcAAAAAAAAAAAAAAAAAANhqpnthbO3Vnh7LO7a4ejpi5Yes6db6pcbnEUe82/ja8yjZ0GOyqwqv9udnLXbQovM5P3393t1861/7NNfyjf96N300IgbL5a3XX9K8/vbu/R2+X/m7xQKvKdm0/v1vna2/2dPZfOsPL0Zcqc8/g9vNP2l81Hjffv6p1s9fi/UPPmmxAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrmRQAAAP//bpp05Q==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.432113696s ago: executing program 4 (id=3380): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) chdir(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 2.319569126s ago: executing program 4 (id=3383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={r9, 0x5, 0x1, [0x40]}, 0xa) sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0) 2.228725264s ago: executing program 3 (id=3385): socket$pppoe(0x18, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x10000, 0x5, 0xfffffff8, 0x9, 0x51, 0xf5, 0x1, 0x9b}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x7ffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0xfbff, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 2.078460308s ago: executing program 2 (id=3386): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x0, 0xfffffffc, 0x1, 0x9a, "58ef65941166ff64ae1e6ceca0d94c931a90f4", 0x4, 0x5}) 2.077148547s ago: executing program 9 (id=3387): clock_getres(0x7, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) epoll_create(0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000009a00)=[{{&(0x7f00000003c0)=@isdn, 0x80, &(0x7f00000004c0)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, &(0x7f0000002340)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/146, 0x92}], 0x4, &(0x7f0000005340)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000007c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000880)=""/93, 0x5d}, {&(0x7f0000000900)=""/3, 0x3}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/236, 0xec}], 0x5, &(0x7f0000000b80)=""/225, 0xe1}, 0xd}, {{&(0x7f0000000c80)=@ieee802154, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/199, 0xc7}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/4096, 0x1000}], 0x3}, 0x80}, {{&(0x7f0000000e40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001240)=[{&(0x7f0000008340)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000000f80)=""/6, 0x6}, {&(0x7f0000000fc0)=""/142, 0x8e}, {&(0x7f0000001080)=""/148, 0x94}, {&(0x7f0000001140)=""/122, 0x7a}, {&(0x7f00000011c0)=""/41, 0x29}, {&(0x7f0000001200)=""/62, 0x3e}], 0x8}, 0xd}, {{&(0x7f0000009340)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000098c0)=[{&(0x7f00000093c0)=""/57, 0x39}, {&(0x7f0000009400)=""/193, 0xc1}, {&(0x7f0000009500)=""/177, 0xb1}, {&(0x7f00000095c0)=""/128, 0x80}, {&(0x7f0000009640)=""/80, 0x50}, {&(0x7f00000096c0)=""/136, 0x88}, {&(0x7f0000009780)=""/156, 0x9c}, {&(0x7f0000009840)=""/116, 0x74}], 0x8, &(0x7f0000009940)=""/169, 0xa9}, 0x1}], 0x6, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x4a, &(0x7f0000000100)=0xffffffff, 0x4) fchdir(r1) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x4, 0x3, 0x17, 0x9, 0x0, 0x7, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 1.24968232s ago: executing program 4 (id=3388): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) (async) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r3, 0x4, 0x0, @val=@perf_event={0x3}}, 0x18) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x40}}, 0x440088c4) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x2, r5}) 1.169250607s ago: executing program 3 (id=3390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa368100000086dd60010100001011fffe8000000000000000000000000000bbfe80000000001e22001090780203000000000000000000000000020000000000"], 0x0) 1.098351743s ago: executing program 2 (id=3391): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000840), 0xf, 0x2000) openat$cgroup_ro(r0, &(0x7f0000000880)='blkio.bfq.io_queued\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f00000007c0)={{r5, &(0x7f0000000000)='+\'{\x00', 0x311040, &(0x7f0000000080)={@align=0x67ee7efb, {0x79, 0x5, 0x307e5083, 0x7}}, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0xa07}, 0x4, &(0x7f0000000740)=[{0x3, 0x9, &(0x7f0000000240)='\x00', &(0x7f0000000280)="510dda7354befc58b6a676a31008909550ef07943429c3ee79a0fc9eef81bc910a3e678ee659abb4d19be972a4849fc915038c443edf12239c297926036ecd8ed3241d5738383d095bf6e9f25b3cc30a0e695d282ef042038ee497aafe3f337e6a21cd6f56e33eb94c088f0dc3746c3c8f5d773545ee0f56b4fd0af1592bf5ae79d93a8c8c772c41c8e8efc2c1f52f7d9fa239521eeb8f6604d40212e1e7173fbcf4ae4da34432d124b1f8e36bf021bccbc54e58f44eca4a862d966aee8447f7d80af0f0910d292332af3f0804917ec464dee4a94448fe5531b36d7d5f106f9800398427f177cb15e804f59668683ca336a24f1e3119", 0xf6, 0x10}, {0x3, 0x5, &(0x7f0000000380)='syzkaller\x00', &(0x7f00000003c0)="d5aa2814b054c218d7e3c47d0216bc59300bc41a7e780678f2f4f9589c491996b9e0debb228d7f70492e86118454e0ab7d475e40e174fcc86dd3ee4850d95f0e490f486fc885e0dd5168ec51200186037e0f", 0x52, 0x20}, {0x3, 0x2, &(0x7f00000004c0)='\x00', &(0x7f0000000600)="be21936f09122dd3cf0779dbe286684dcb75b0f6d44794ce7fa70324c6bc159ef0a39bcb5b4ec8a04642f8aa4d69f1674fbfe8e89456d777d7891a8c2815ae73a1026c53e21830b454b3bb91abe35de044666491f01dad5ce8c429b4025cd7f7cca728105f998d0aebe22b533dfb986bb117d4d6703eebdbe4ba7e9e874e5e6c694bcd7742753961c429c4d5ef3c4c0498caaacfa9e0fc14e1c1f643c30073d1712da4c5c21a2825e4206482462e7829c40225699581b52df50c498f8fdf279117a09fcb29271db082855eb3dead969f8d767a18ad51ac1b313ead2b6425fc23c32e1d0aa1c5efe56c96e96d", 0xec, 0x2}, {0x2, 0x800, &(0x7f0000000580)='-,-\x00', &(0x7f0000000700)="d5cda57330", 0x5, 0x3a}]}) vmsplice(r6, 0x0, 0x0, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.066831586s ago: executing program 0 (id=3392): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0xcbe082, 0x7b) 1.066613556s ago: executing program 3 (id=3393): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) chdir(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 1.02694481s ago: executing program 3 (id=3394): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") 996.709212ms ago: executing program 0 (id=3395): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async, rerun: 32) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (rerun: 32) mmap(&(0x7f000017c000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x50, 0xffffffffffffffff, 0x28f43000) 880.076273ms ago: executing program 0 (id=3396): eventfd(0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@abort}, {@nodelalloc}]}, 0x1, 0x25f, &(0x7f0000000380)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfTSYoSY4M148uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFzZnQ3knyZmNzvifD6w2ZnJm/d7w8z3TQiZbACF1RcRQxFRioj+iKhERLK+wefZq6+5OtO9MBZRq/3yMGm0y9Yza/v1RsR0RHwXEfNpEv+VI6bm/lh+vPjTV8cnK1+em/u9u6MH2bSyvPTz6tmRYxeHv526fvP+SBJDUd1wXO2XbLOtnER8sB/F3hBJOe8RsBujhy/cquf+w4j4opH/SqSRnbwTE+/MV+KbMy/b9+SDGx93cqxA+9Vqlfo9cLoGFE4aEdVI0oGIyJbTdGAg+xn+dqkn/X984lD/v+OTB/7Je6YC2qUasfTj5a5LvZvyf6+U5R94S2W/lFr6dXT2Tn1htZT3gICO+CR7q9//+/868nXIPxSO/ENxyT8Ul/xDcck/FJf8Q3HJPxTE8+Yf+63bJP9QXPIPxbXn/J96tn+DAjpiff4BgGKpde3pqeH2PoQM5CLv+QcAAAAAAAAAAAAAAAAAANhqpnthbO3Vnh7LO7a4ejpi5Yes6db6pcbnEUe82/ja8yjZ0GOyqwqv9udnLXbQovM5P3393t1861/7NNfyjf96N300IgbL5a3XX9K8/vbu/R2+X/m7xQKvKdm0/v1vna2/2dPZfOsPL0Zcqc8/g9vNP2l81Hjffv6p1s9fi/UPPmmxAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrmRQAAAP//bpp05Q==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca8", 0x26}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 748.536394ms ago: executing program 0 (id=3397): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x814) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24000000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) (fail_nth: 6) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x2080080, &(0x7f0000000540)='syz2\x00') close(0x3) readv(r2, &(0x7f0000000140), 0x0) mq_notify(0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 724.385256ms ago: executing program 4 (id=3398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={r9, 0x5, 0x1, [0x40]}, 0xa) sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0) 632.188464ms ago: executing program 3 (id=3399): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") (fail_nth: 16) 48.121015ms ago: executing program 0 (id=3400): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x408007}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) socket$vsock_stream(0x28, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 0 (id=3401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r0}, &(0x7f0000000b00), &(0x7f0000000240)}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) kernel console output (not intermixed with test programs): tate [ 403.263710][T14674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14674 comm=syz.7.2880 [ 403.283995][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 403.286188][T14674] lo speed is unknown, defaulting to 1000 [ 403.299805][T14674] lo speed is unknown, defaulting to 1000 [ 403.435147][ T28] audit: type=1400 audit(1771923147.151:9097): avc: denied { getopt } for pid=14686 comm="syz.4.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.903346][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2889'. [ 404.800742][T14717] set_capacity_and_notify: 1 callbacks suppressed [ 404.800784][T14717] loop0: detected capacity change from 0 to 164 [ 404.857022][T14719] loop9: detected capacity change from 0 to 164 [ 404.947854][T14721] netlink: 'syz.7.2897': attribute type 1 has an invalid length. [ 404.982553][T14725] loop4: detected capacity change from 0 to 2048 [ 405.050086][T14729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.071582][T14729] bond2: (slave bond3): making interface the new active one [ 405.109360][T14729] bond2: (slave bond3): Enslaving as an active interface with an up link [ 405.109817][ T3304] Alternate GPT is invalid, using primary GPT. [ 405.124644][ T3304] loop4: p2 p3 p7 [ 405.147048][ T28] audit: type=1400 audit(1771923148.861:9098): avc: denied { accept } for pid=14736 comm="syz.9.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.198894][T13438] syz_tun (unregistering): left allmulticast mode [ 405.213311][T14725] Alternate GPT is invalid, using primary GPT. [ 405.219967][T14725] loop4: p2 p3 p7 [ 405.286328][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.332986][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 50542 - 0 [ 405.386526][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 405.386608][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 405.397691][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 405.504849][T14757] sctp: [Deprecated]: syz.9.2908 (pid 14757) Use of int in max_burst socket option. [ 405.504849][T14757] Use struct sctp_assoc_value instead [ 405.543730][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.557537][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 50542 - 0 [ 405.599860][T14757] syzkaller0: entered promiscuous mode [ 405.605571][T14757] syzkaller0: entered allmulticast mode [ 405.632699][T14734] lo speed is unknown, defaulting to 1000 [ 405.650297][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2912'. [ 405.661590][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.673992][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 50542 - 0 [ 405.704134][T14734] lo speed is unknown, defaulting to 1000 [ 405.750127][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.760343][T14776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2914'. [ 405.772662][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 50542 - 0 [ 405.848605][T14734] chnl_net:caif_netlink_parms(): no params data found [ 406.142099][T14734] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.184898][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.198669][T14734] bridge_slave_0: entered allmulticast mode [ 406.213240][T14734] bridge_slave_0: entered promiscuous mode [ 406.238951][ T59] bridge_slave_1: left allmulticast mode [ 406.248172][ T59] bridge_slave_1: left promiscuous mode [ 406.255684][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.264116][ T59] bridge_slave_0: left allmulticast mode [ 406.273384][ T59] bridge_slave_0: left promiscuous mode [ 406.282491][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.323078][ T3422] SELinux: failure in sel_netif_sid_slow(), invalid network interface (89) [ 406.332090][ T3422] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 406.464020][ T59] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 406.472249][ T59] bridge2 (unregistering): left promiscuous mode [ 406.556545][T14817] net_ratelimit: 12 callbacks suppressed [ 406.556558][T14817] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 406.572574][ T59] bond0 (unregistering): Released all slaves [ 406.581786][ T59] bond1 (unregistering): Released all slaves [ 406.590161][ T59] bond2 (unregistering): Released all slaves [ 406.599595][ T59] bond3 (unregistering): Released all slaves [ 406.614678][ T59] bond4 (unregistering): Released all slaves [ 406.624993][ T59] bond5 (unregistering): Released all slaves [ 406.709163][T14734] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.716751][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.724146][T14734] bridge_slave_1: entered allmulticast mode [ 406.730956][T14734] bridge_slave_1: entered promiscuous mode [ 406.749066][T14734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.762417][T14734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.780346][ T59] tipc: Disabling bearer [ 406.786641][ T59] tipc: Left network mode [ 406.804361][ T59] IPVS: stopping backup sync thread 12435 ... [ 406.814220][T14734] team0: Port device team_slave_0 added [ 406.822269][T14734] team0: Port device team_slave_1 added [ 406.848607][T14734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.856069][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.083962][T14734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.165220][T14840] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2928'. [ 407.218009][T14734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.291086][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.364159][T14844] loop4: detected capacity change from 0 to 512 [ 407.373747][T14734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.404881][T14844] EXT4-fs (loop4): 1 truncate cleaned up [ 407.420775][T14844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.465585][T14734] hsr_slave_0: entered promiscuous mode [ 407.473613][T14734] hsr_slave_1: entered promiscuous mode [ 407.528148][T14734] debugfs: 'hsr0' already exists in 'hsr' [ 407.534489][T14734] Cannot create hsr debugfs directory [ 407.579963][T14837] loop3: detected capacity change from 0 to 8192 [ 407.634075][ T59] hsr_slave_0: left promiscuous mode [ 407.639997][ T59] hsr_slave_1: left promiscuous mode [ 407.646070][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.659060][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.668846][ T3300] loop3: p1 < > p2 p4 < p5 > [ 407.673768][ T3300] loop3: partition table partially beyond EOD, truncated [ 407.685456][ T3300] loop3: p1 start 134217728 is beyond EOD, truncated [ 407.692541][ T3300] loop3: p2 size 591360 extends beyond EOD, truncated [ 407.720612][T14864] loop9: detected capacity change from 0 to 512 [ 407.722479][ T3300] loop3: p5 size 591360 extends beyond EOD, truncated [ 407.745533][ T59] team_slave_1 (unregistering): left promiscuous mode [ 407.752439][T14864] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 407.780975][T14837] loop3: p1 < > p2 p4 < p5 > [ 407.788390][T14864] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 407.791071][ T59] team0 (unregistering): Port device team_slave_1 removed [ 407.809819][T14864] EXT4-fs (loop9): orphan cleanup on readonly fs [ 407.833293][T14837] loop3: partition table partially beyond EOD, truncated [ 407.840916][T14864] EXT4-fs (loop9): 1 truncate cleaned up [ 407.855814][ T59] team_slave_0 (unregistering): left promiscuous mode [ 407.867646][T14864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 407.913534][ T59] team0 (unregistering): Port device team_slave_0 removed [ 407.929950][T14837] loop3: p1 start 134217728 is beyond EOD, truncated [ 407.943403][T14864] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.974608][T14837] loop3: p2 size 591360 extends beyond EOD, truncated [ 407.994656][T14837] loop3: p5 size 591360 extends beyond EOD, truncated [ 408.104228][T14870] loop9: detected capacity change from 0 to 512 [ 408.108721][ T10] lo speed is unknown, defaulting to 1000 [ 408.129163][ T10] infiniband syz0: ib_query_port failed (-19) [ 408.157072][T14870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 408.173019][T14870] EXT4-fs (loop9): orphan cleanup on readonly fs [ 408.186671][T14870] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 408.248599][T13285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.277432][T14870] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 408.338579][T14870] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.2938: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 408.420728][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 408.427043][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 408.441985][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 408.486995][T14870] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 408.487274][T14870] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2938: couldn't read orphan inode 13 (err -117) [ 408.502854][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 408.514909][ C1] EXT4-fs (loop9): last error at time 1771923152: ext4_ext_check_inode:521: inode 13 [ 408.533125][T14870] loop9: lost filesystem error report for type 5 error -117 [ 408.538420][T14870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.585632][T14870] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.789645][T14910] FAULT_INJECTION: forcing a failure. [ 408.789645][T14910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.807762][T14734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.825976][T14734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.873203][T14910] CPU: 0 UID: 0 PID: 14910 Comm: syz.7.2947 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.873241][T14910] Tainted: [W]=WARN [ 408.873248][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.873260][T14910] Call Trace: [ 408.873266][T14910] [ 408.873274][T14910] __dump_stack+0x1d/0x30 [ 408.873364][T14910] dump_stack_lvl+0x95/0xd0 [ 408.873391][T14910] dump_stack+0x15/0x1b [ 408.873415][T14910] should_fail_ex+0x263/0x280 [ 408.873477][T14910] should_fail+0xb/0x20 [ 408.873495][T14910] should_fail_usercopy+0x1a/0x20 [ 408.873578][T14910] _copy_from_iter+0xcf/0xea0 [ 408.873600][T14910] ? kmem_cache_alloc_noprof+0x2f9/0x400 [ 408.873620][T14910] ? __build_skb+0x43/0x220 [ 408.873645][T14910] ? __build_skb+0x1b3/0x220 [ 408.873748][T14910] ? is_vmalloc_addr+0x37/0x90 [ 408.873780][T14910] netlink_sendmsg+0x4ae/0x6f0 [ 408.873856][T14910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.873885][T14910] ____sys_sendmsg+0x5af/0x600 [ 408.873916][T14910] ___sys_sendmsg+0x195/0x1e0 [ 408.873957][T14910] __x64_sys_sendmsg+0xd4/0x160 [ 408.873989][T14910] x64_sys_call+0x194c/0x3020 [ 408.874162][T14910] do_syscall_64+0x12c/0x370 [ 408.874199][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.874254][T14910] RIP: 0033:0x7f7d2553c629 [ 408.874284][T14910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.874303][T14910] RSP: 002b:00007f7d23f8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.874325][T14910] RAX: ffffffffffffffda RBX: 00007f7d257b5fa0 RCX: 00007f7d2553c629 [ 408.874339][T14910] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 408.874356][T14910] RBP: 00007f7d23f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 408.874396][T14910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.874411][T14910] R13: 00007f7d257b6038 R14: 00007f7d257b5fa0 R15: 00007fff814ff1d8 [ 408.874434][T14910] [ 408.904228][T14918] vlan0: entered promiscuous mode [ 409.094149][T14918] hsr0: entered promiscuous mode [ 409.104534][T14734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.143386][T14734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.213221][T14957] loop7: detected capacity change from 0 to 128 [ 409.286169][T14961] loop9: detected capacity change from 0 to 1024 [ 409.295295][T14961] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 409.340331][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.353521][T14961] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 409.374474][T14961] EXT4-fs (loop9): invalid journal inode [ 409.380251][T14961] EXT4-fs (loop9): can't get journal size [ 409.388433][T14734] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.404486][T14961] EXT4-fs error (device loop9): ext4_protect_reserved_inode:182: inode #2: comm syz.9.2956: blocks 3-3 from inode overlap system zone [ 409.423575][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.430665][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.444718][ T3762] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.451848][ T3762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.467519][T14961] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 409.467803][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 409.472854][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 409.492212][ C0] EXT4-fs (loop9): initial error at time 1771923153: ext4_protect_reserved_inode:182: inode 2 [ 409.502533][ C0] EXT4-fs (loop9): last error at time 1771923153: ext4_protect_reserved_inode:182: inode 2 [ 409.515567][T14961] EXT4-fs (loop9): failed to initialize system zone (-117) [ 409.523092][T14961] EXT4-fs (loop9): mount failed [ 409.531016][T14734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.551260][T14734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.591155][T14976] loop7: detected capacity change from 0 to 512 [ 409.617429][T14976] EXT4-fs: inline encryption not supported [ 409.661460][T14734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.669032][T14976] EXT4-fs: Invalid want_extra_isize 262236 [ 409.725873][T14982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.771305][T14982] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.836073][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.858661][T14734] veth0_vlan: entered promiscuous mode [ 409.888173][T14734] veth1_vlan: entered promiscuous mode [ 409.937527][T14734] veth0_macvtap: entered promiscuous mode [ 409.946043][T14734] veth1_macvtap: entered promiscuous mode [ 409.957593][T14734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.994629][T14734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.060843][ T7369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.072779][ T7369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.122721][ T7369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.132451][ T7369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.177238][T15007] FAULT_INJECTION: forcing a failure. [ 410.177238][T15007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.191857][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2966'. [ 410.201093][T15007] CPU: 1 UID: 0 PID: 15007 Comm: syz.3.2967 Tainted: G W syzkaller #0 PREEMPT(full) [ 410.201174][T15007] Tainted: [W]=WARN [ 410.201216][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.201230][T15007] Call Trace: [ 410.201237][T15007] [ 410.201246][T15007] __dump_stack+0x1d/0x30 [ 410.201278][T15007] dump_stack_lvl+0x95/0xd0 [ 410.201305][T15007] dump_stack+0x15/0x1b [ 410.201327][T15007] should_fail_ex+0x263/0x280 [ 410.201391][T15007] should_fail+0xb/0x20 [ 410.201410][T15007] should_fail_usercopy+0x1a/0x20 [ 410.201486][T15007] _copy_from_user+0x1c/0xb0 [ 410.201515][T15007] __sys_bpf+0x183/0x7e0 [ 410.201544][T15007] __x64_sys_bpf+0x41/0x50 [ 410.201623][T15007] x64_sys_call+0x10cb/0x3020 [ 410.201656][T15007] do_syscall_64+0x12c/0x370 [ 410.201780][T15007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.201804][T15007] RIP: 0033:0x7fbe2feac629 [ 410.201820][T15007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.201838][T15007] RSP: 002b:00007fbe2e907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.201860][T15007] RAX: ffffffffffffffda RBX: 00007fbe30125fa0 RCX: 00007fbe2feac629 [ 410.201877][T15007] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 410.201954][T15007] RBP: 00007fbe2e907090 R08: 0000000000000000 R09: 0000000000000000 [ 410.201970][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.201985][T15007] R13: 00007fbe30126038 R14: 00007fbe30125fa0 R15: 00007ffda53230e8 [ 410.202007][T15007] [ 410.202216][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2964'. [ 410.459252][T15015] set_capacity_and_notify: 1 callbacks suppressed [ 410.459272][T15015] loop7: detected capacity change from 0 to 512 [ 410.525121][ T59] IPVS: stop unused estimator thread 0... [ 410.581411][T15020] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2970'. [ 410.600768][T15015] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2964: invalid indirect mapped block 256 (level 2) [ 410.665885][T15015] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 410.666115][T15015] EXT4-fs (loop7): Remounting filesystem read-only [ 410.675494][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 410.675522][ C1] EXT4-fs (loop7): initial error at time 1771923154: ext4_free_branches:1023: inode 11 [ 410.675558][ C1] EXT4-fs (loop7): last error at time 1771923154: ext4_free_branches:1023: inode 11 [ 410.720179][T15028] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 410.740622][T15028] loop4: detected capacity change from 0 to 512 [ 410.757788][T15028] EXT4-fs error (device loop4): ext4_quota_enable:7192: inode #3: comm syz.4.2973: iget: checksum invalid [ 410.805072][T15028] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -74 [ 410.805425][T15028] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.2973: Bad quota inode: 3, type: 0 [ 410.814775][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 410.814800][ C1] EXT4-fs (loop4): initial error at time 1771923154: ext4_quota_enable:7192: inode 3 [ 410.814850][ C1] EXT4-fs (loop4): last error at time 1771923154: ext4_quota_enable:7192: inode 3 [ 410.853400][T15015] EXT4-fs (loop7): 2 truncates cleaned up [ 410.861333][T15010] loop9: detected capacity change from 0 to 2048 [ 410.869973][T15015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.880974][T15028] loop4: lost filesystem error report for type 5 error -117 [ 410.888338][T15028] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 410.933087][T15028] EXT4-fs (loop4): mount failed [ 410.994534][T15010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.040533][T15010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.092283][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 411.092304][ T28] audit: type=1326 audit(1771923154.791:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15034 comm="syz.3.2975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe2feac629 code=0x0 [ 411.164306][T15047] tipc: Started in network mode [ 411.169197][T15047] tipc: Node identity 4, cluster identity 4711 [ 411.176671][T15046] loop4: detected capacity change from 0 to 1024 [ 411.180445][T15047] tipc: Node number set to 4 [ 411.215896][T15046] EXT4-fs: dax option not supported [ 411.231944][T11577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.242489][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2975'. [ 411.272082][T15049] loop0: detected capacity change from 0 to 164 [ 411.294108][T15049] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=164 [ 411.348879][T15054] veth0: entered promiscuous mode [ 411.362641][T15053] veth0: left promiscuous mode [ 411.455963][T15060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2985'. [ 411.659524][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2986'. [ 412.412400][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 412.471418][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 412.505691][T15090] loop0: detected capacity change from 0 to 512 [ 412.543051][T15090] EXT4-fs: inline encryption not supported [ 412.548910][T15090] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.574301][T15096] loop4: detected capacity change from 0 to 164 [ 412.581037][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2995'. [ 412.596725][T15090] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 412.639347][T15094] loop3: detected capacity change from 0 to 512 [ 412.723649][T15094] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2991: invalid indirect mapped block 256 (level 2) [ 412.774178][T15102] loop4: detected capacity change from 0 to 4096 [ 412.780574][T15094] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 412.780779][T15094] EXT4-fs (loop3): Remounting filesystem read-only [ 412.790093][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 412.790115][ C0] EXT4-fs (loop3): initial error at time 1771923156: ext4_free_branches:1023: inode 11 [ 412.790153][ C0] EXT4-fs (loop3): last error at time 1771923156: ext4_free_branches:1023: inode 11 [ 412.822467][T15094] EXT4-fs (loop3): 2 truncates cleaned up [ 412.828728][T15094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.847073][ T28] audit: type=1400 audit(1771923156.561:9105): avc: denied { bind } for pid=15103 comm="syz.7.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 412.883895][T15102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.897704][T15095] loop9: detected capacity change from 0 to 512 [ 412.920469][T15095] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2995: invalid indirect mapped block 256 (level 2) [ 412.994326][T15095] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 412.998498][T15095] EXT4-fs (loop9): Remounting filesystem read-only [ 413.007786][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 413.007822][ C1] EXT4-fs (loop9): initial error at time 1771923156: ext4_free_branches:1023: inode 11 [ 413.007857][ C1] EXT4-fs (loop9): last error at time 1771923156: ext4_free_branches:1023: inode 11 [ 413.064398][T15095] EXT4-fs (loop9): 2 truncates cleaned up [ 413.070947][T15095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.188661][ T28] audit: type=1400 audit(1771923156.901:9106): avc: denied { getopt } for pid=15117 comm="syz.7.3003" lport=52081 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 413.207697][T15118] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 413.222219][T13285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.259307][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.302714][T15125] lo speed is unknown, defaulting to 1000 [ 413.309075][T15125] veth1: entered allmulticast mode [ 413.315383][T15122] netlink: 'syz.0.3006': attribute type 16 has an invalid length. [ 413.345229][T15122] netlink: 'syz.0.3006': attribute type 17 has an invalid length. [ 413.384083][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.433666][T15122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.591340][T15150] FAULT_INJECTION: forcing a failure. [ 413.591340][T15150] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 413.605411][T15150] CPU: 0 UID: 0 PID: 15150 Comm: syz.4.3017 Tainted: G W syzkaller #0 PREEMPT(full) [ 413.605444][T15150] Tainted: [W]=WARN [ 413.605497][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.605561][T15150] Call Trace: [ 413.605569][T15150] [ 413.605618][T15150] __dump_stack+0x1d/0x30 [ 413.605651][T15150] dump_stack_lvl+0x95/0xd0 [ 413.605677][T15150] dump_stack+0x15/0x1b [ 413.605701][T15150] should_fail_ex+0x263/0x280 [ 413.605804][T15150] should_fail_alloc_page+0xf2/0x100 [ 413.605830][T15150] __alloc_frozen_pages_noprof+0x108/0x360 [ 413.605933][T15150] alloc_pages_mpol+0xb3/0x260 [ 413.605967][T15150] vma_alloc_folio_noprof+0x1a9/0x300 [ 413.606025][T15150] handle_mm_fault+0x111f/0x3020 [ 413.606061][T15150] ? mt_find+0x291/0x3d0 [ 413.606108][T15150] do_user_addr_fault+0x3fd/0x1050 [ 413.606148][T15150] exc_page_fault+0x62/0xa0 [ 413.606240][T15150] asm_exc_page_fault+0x26/0x30 [ 413.606263][T15150] RIP: 0010:csum_partial_copy_generic+0x91/0x1e0 [ 413.606297][T15150] Code: 4c 8b 77 30 4c 8b 6f 38 0f 18 8f 40 01 00 00 48 11 d8 4c 11 c0 4c 11 d8 48 11 d0 4c 11 d0 4c 11 f8 4c 11 f0 4c 11 e8 41 ff cc <48> 89 1e 4c 89 46 08 4c 89 5e 10 48 89 56 18 4c 89 56 20 4c 89 7e [ 413.606317][T15150] RSP: 0018:ffffc90000eab7e8 EFLAGS: 00050203 [ 413.606372][T15150] RAX: 5bb5344164494927 RBX: 0000000400000001 RCX: 0000000000000094 [ 413.606389][T15150] RDX: 0130000000000000 RSI: 0000200000001980 RDI: ffff88811a83219a [ 413.606404][T15150] RBP: ffffc90000eabe00 R08: 77fd61743b144b7b R09: 0000000000000000 [ 413.606421][T15150] R10: afb8000000000000 R11: 00004ed12b011c7b R12: 0000000000000001 [ 413.606437][T15150] R13: 7db551442e85511c R14: 880a8d69a8ef43bc R15: 2d0fa54926bf4c58 [ 413.606460][T15150] csum_and_copy_to_user+0x67/0x90 [ 413.606511][T15150] csum_and_copy_to_iter+0x3ec/0xfc0 [ 413.606546][T15150] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 413.606573][T15150] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 413.606634][T15150] __skb_datagram_iter+0x649/0x680 [ 413.606664][T15150] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 413.606800][T15150] skb_copy_and_csum_datagram_msg+0x12d/0x360 [ 413.606831][T15150] udp_recvmsg+0x2fd/0xa90 [ 413.606884][T15150] ? __pfx_udp_recvmsg+0x10/0x10 [ 413.606916][T15150] inet_recvmsg+0x143/0x290 [ 413.606948][T15150] sock_recvmsg+0xf6/0x160 [ 413.607001][T15150] ____sys_recvmsg+0xf5/0x280 [ 413.607066][T15150] ___sys_recvmsg+0x11f/0x3b0 [ 413.607187][T15150] do_recvmmsg+0x1ef/0x560 [ 413.607223][T15150] ? fput+0x8f/0xc0 [ 413.607251][T15150] __x64_sys_recvmmsg+0xe5/0x170 [ 413.607280][T15150] x64_sys_call+0x80f/0x3020 [ 413.607319][T15150] do_syscall_64+0x12c/0x370 [ 413.607356][T15150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.607443][T15150] RIP: 0033:0x7f699cd1c629 [ 413.607460][T15150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.607550][T15150] RSP: 002b:00007f699b74e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 413.607574][T15150] RAX: ffffffffffffffda RBX: 00007f699cf96090 RCX: 00007f699cd1c629 [ 413.607591][T15150] RDX: 0000000000000001 RSI: 000020000000be00 RDI: 0000000000000003 [ 413.607605][T15150] RBP: 00007f699b74e090 R08: 0000000000000000 R09: 0000000000000000 [ 413.607679][T15150] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.607695][T15150] R13: 00007f699cf96128 R14: 00007f699cf96090 R15: 00007ffdcc179818 [ 413.607715][T15150] [ 413.985281][T15152] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3015: invalid indirect mapped block 256 (level 2) [ 413.998924][T15152] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 413.999252][T15152] EXT4-fs (loop0): Remounting filesystem read-only [ 414.006519][T15155] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 3: comm syz.7.3016: lblock 0 mapped to illegal pblock 3 (length 1) [ 414.008407][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 414.021225][T15155] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 414.028891][ C1] EXT4-fs (loop0): initial error at time 1771923157: ext4_free_branches:1023: inode 11 [ 414.028933][ C1] EXT4-fs (loop0): last error at time 1771923157: ext4_free_branches:1023: inode 11 [ 414.067964][T15155] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.3016: error -117 reading directory block [ 414.080520][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 414.080539][ C1] EXT4-fs (loop7): initial error at time 1771923157: ext4_map_blocks:776: inode 2: block 3 [ 414.080572][ C1] EXT4-fs (loop7): last error at time 1771923157: ext4_map_blocks:776: inode 2: block 3 [ 414.108932][T15152] EXT4-fs (loop0): 2 truncates cleaned up [ 414.115933][T15152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.129647][T15155] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 414.140768][T15155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.155131][T15155] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #2: comm syz.7.3016: corrupted xattr block 255: invalid header [ 414.169872][T15155] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 414.181688][T15155] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.527755][T15170] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3020: invalid indirect mapped block 256 (level 2) [ 414.541406][T15170] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 414.541573][T15170] EXT4-fs (loop4): Remounting filesystem read-only [ 414.550808][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 414.550834][ C0] EXT4-fs (loop4): initial error at time 1771923158: ext4_free_branches:1023: inode 11 [ 414.550868][ C0] EXT4-fs (loop4): last error at time 1771923158: ext4_free_branches:1023: inode 11 [ 414.599202][T15170] EXT4-fs (loop4): 2 truncates cleaned up [ 414.629874][T15170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.662692][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.838973][T15191] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 415.252721][T13285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.302318][T15208] FAULT_INJECTION: forcing a failure. [ 415.302318][T15208] name failslab, interval 1, probability 0, space 0, times 0 [ 415.316592][T15208] CPU: 0 UID: 0 PID: 15208 Comm: syz.0.3033 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.316672][T15208] Tainted: [W]=WARN [ 415.316681][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.316695][T15208] Call Trace: [ 415.316703][T15208] [ 415.316711][T15208] __dump_stack+0x1d/0x30 [ 415.316741][T15208] dump_stack_lvl+0x95/0xd0 [ 415.316767][T15208] dump_stack+0x15/0x1b [ 415.316830][T15208] should_fail_ex+0x263/0x280 [ 415.316901][T15208] should_failslab+0x8c/0xb0 [ 415.316924][T15208] __kmalloc_noprof+0xb8/0x4e0 [ 415.316939][T15208] ? start_sync_thread+0x608/0x16b0 [ 415.317011][T15208] start_sync_thread+0x608/0x16b0 [ 415.317029][T15208] ? cred_has_capability+0x224/0x2a0 [ 415.317062][T15208] ? __pfx_sync_thread_backup+0x10/0x10 [ 415.317077][T15208] ? selinux_capable+0x31/0x40 [ 415.317095][T15208] ? should_fail_ex+0xd9/0x280 [ 415.317189][T15208] ? sized_strscpy+0x121/0x1a0 [ 415.317218][T15208] do_ip_vs_set_ctl+0x2e0/0xa60 [ 415.317315][T15208] ? _parse_integer_limit+0x170/0x190 [ 415.317495][T15208] ? do_ip_setsockopt+0x1af1/0x2290 [ 415.317510][T15208] nf_setsockopt+0x199/0x1b0 [ 415.317536][T15208] ip_setsockopt+0x102/0x110 [ 415.317550][T15208] tcp_setsockopt+0x98/0xb0 [ 415.317569][T15208] sock_common_setsockopt+0x69/0x80 [ 415.317591][T15208] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 415.317613][T15208] __sys_setsockopt+0x184/0x200 [ 415.317741][T15208] __x64_sys_setsockopt+0x64/0x80 [ 415.317844][T15208] x64_sys_call+0x2327/0x3020 [ 415.317942][T15208] do_syscall_64+0x12c/0x370 [ 415.317973][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.317988][T15208] RIP: 0033:0x7fddd13dc629 [ 415.318001][T15208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.318014][T15208] RSP: 002b:00007fddcfe37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 415.318068][T15208] RAX: ffffffffffffffda RBX: 00007fddd1655fa0 RCX: 00007fddd13dc629 [ 415.318082][T15208] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 415.318091][T15208] RBP: 00007fddcfe37090 R08: 0000000000000018 R09: 0000000000000000 [ 415.318100][T15208] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 415.318108][T15208] R13: 00007fddd1656038 R14: 00007fddd1655fa0 R15: 00007ffcc50d8e08 [ 415.318122][T15208] [ 415.641202][T15215] openvswitch: netlink: Missing key (keys=40, expected=80) [ 415.679613][T15219] netlink: 'syz.9.3036': attribute type 13 has an invalid length. [ 415.715818][T15225] __nla_validate_parse: 7 callbacks suppressed [ 415.715836][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3040'. [ 415.741699][T15227] set_capacity_and_notify: 5 callbacks suppressed [ 415.741716][T15227] loop4: detected capacity change from 0 to 128 [ 415.947015][T15239] FAULT_INJECTION: forcing a failure. [ 415.947015][T15239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.960642][T15239] CPU: 0 UID: 0 PID: 15239 Comm: syz.9.3046 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.960716][T15239] Tainted: [W]=WARN [ 415.960736][T15239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.960784][T15239] Call Trace: [ 415.960792][T15239] [ 415.960800][T15239] __dump_stack+0x1d/0x30 [ 415.960849][T15239] dump_stack_lvl+0x95/0xd0 [ 415.960899][T15239] dump_stack+0x15/0x1b [ 415.960920][T15239] should_fail_ex+0x263/0x280 [ 415.960941][T15239] should_fail+0xb/0x20 [ 415.960961][T15239] should_fail_usercopy+0x1a/0x20 [ 415.961042][T15239] _copy_from_user+0x1c/0xb0 [ 415.961137][T15239] user_termios_to_kernel_termios+0x22/0x30 [ 415.961175][T15239] set_termios+0xd5/0x4f0 [ 415.961224][T15239] tty_mode_ioctl+0x37f/0x5b0 [ 415.961274][T15239] n_tty_ioctl_helper+0x87/0x370 [ 415.961359][T15239] n_tty_ioctl+0x101/0x230 [ 415.961391][T15239] ? __pfx_n_tty_ioctl+0x10/0x10 [ 415.961475][T15239] tty_ioctl+0x83e/0xb80 [ 415.961498][T15239] ? __pfx_tty_ioctl+0x10/0x10 [ 415.961521][T15239] __se_sys_ioctl+0xce/0x140 [ 415.961557][T15239] __x64_sys_ioctl+0x43/0x50 [ 415.961637][T15239] x64_sys_call+0x1563/0x3020 [ 415.961724][T15239] do_syscall_64+0x12c/0x370 [ 415.961849][T15239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.961875][T15239] RIP: 0033:0x7f0eda66c629 [ 415.961945][T15239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.961968][T15239] RSP: 002b:00007f0ed90bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.961993][T15239] RAX: ffffffffffffffda RBX: 00007f0eda8e5fa0 RCX: 00007f0eda66c629 [ 415.962010][T15239] RDX: 0000200000000100 RSI: 00000000402c542c RDI: 0000000000000003 [ 415.962067][T15239] RBP: 00007f0ed90bf090 R08: 0000000000000000 R09: 0000000000000000 [ 415.962081][T15239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.962096][T15239] R13: 00007f0eda8e6038 R14: 00007f0eda8e5fa0 R15: 00007ffef8218598 [ 415.962119][T15239] [ 416.182381][ T28] audit: type=1400 audit(1771923159.891:9107): avc: denied { map } for pid=15242 comm="syz.3.3047" path="/dev/ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 416.265857][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3048'. [ 416.288606][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.299899][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.447459][T15250] wireguard0: entered promiscuous mode [ 416.453263][T15250] wireguard0: entered allmulticast mode [ 416.461549][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3054'. [ 416.534325][T15266] loop7: detected capacity change from 0 to 128 [ 416.703527][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 416.894107][T15268] loop0: detected capacity change from 0 to 512 [ 416.903979][T15268] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3058: invalid indirect mapped block 256 (level 2) [ 416.920642][T15268] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 416.920882][T15268] EXT4-fs (loop0): Remounting filesystem read-only [ 416.930047][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 416.930072][ C1] EXT4-fs (loop0): initial error at time 1771923160: ext4_free_branches:1023: inode 11 [ 416.930114][ C1] EXT4-fs (loop0): last error at time 1771923160: ext4_free_branches:1023: inode 11 [ 416.962657][T15277] geneve3: entered promiscuous mode [ 416.973709][T15268] EXT4-fs (loop0): 2 truncates cleaned up [ 416.980081][T15268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.082100][ T28] audit: type=1326 audit(1771923160.791:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.082994][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3062'. [ 417.129061][T15285] loop9: detected capacity change from 0 to 512 [ 417.167288][T15285] EXT4-fs (loop9): 1 orphan inode deleted [ 417.173665][T15285] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.184507][ T28] audit: type=1326 audit(1771923160.791:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.214213][ T28] audit: type=1326 audit(1771923160.791:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.263238][ T28] audit: type=1326 audit(1771923160.791:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.288340][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.307390][ T28] audit: type=1326 audit(1771923160.791:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.387063][ T28] audit: type=1326 audit(1771923160.791:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.425737][ T28] audit: type=1326 audit(1771923160.791:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.451216][ T28] audit: type=1326 audit(1771923160.791:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.475442][ T4872] syz_tun (unregistering): left allmulticast mode [ 417.483220][ T28] audit: type=1326 audit(1771923160.791:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.9.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0eda66c629 code=0x7ffc0000 [ 417.541144][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.582677][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3068'. [ 417.588258][T15288] lo speed is unknown, defaulting to 1000 [ 417.620111][T15304] bridge1: port 1(veth3) entered blocking state [ 417.627186][T15304] bridge1: port 1(veth3) entered disabled state [ 417.637289][T15304] veth3: entered allmulticast mode [ 417.639104][T15273] Set syz1 is full, maxelem 65536 reached [ 417.649928][T15304] veth3: entered promiscuous mode [ 417.700212][T15307] bridge1: port 2(veth0_to_bond) entered blocking state [ 417.725653][T15307] bridge1: port 2(veth0_to_bond) entered disabled state [ 417.739568][T15307] veth0_to_bond: entered allmulticast mode [ 417.754144][T15307] veth0_to_bond: entered promiscuous mode [ 417.823766][ T3768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.841565][ T3768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.855592][T15311] hub 8-0:1.0: USB hub found [ 417.860325][T15311] hub 8-0:1.0: 8 ports detected [ 417.870670][T15311] netlink: 'syz.0.3067': attribute type 10 has an invalid length. [ 417.916293][ T3768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 417.966814][T15304] vlan0: entered allmulticast mode [ 417.973751][T15304] batadv_slave_1: entered allmulticast mode [ 417.998290][T15304] bridge1: port 3(vlan0) entered blocking state [ 418.020938][T15304] bridge1: port 3(vlan0) entered disabled state [ 418.045293][T15304] vlan0: entered promiscuous mode [ 418.061409][T15304] batadv_slave_1: entered promiscuous mode [ 418.084049][T15311] macvlan1: entered allmulticast mode [ 418.092459][T15311] veth1_vlan: entered allmulticast mode [ 418.101564][T15311] team0: Port device macvlan1 added [ 418.127357][ T3768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.159063][ T3768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.181185][ T3768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 418.233353][T15315] loop9: detected capacity change from 0 to 128 [ 418.282194][T15318] netlink: 'syz.7.3071': attribute type 1 has an invalid length. [ 418.291377][T15318] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3071'. [ 418.462146][ T3768] bond0: (slave netdevsim1): Releasing backup interface [ 418.483373][ T3768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.497113][ T3768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.507563][ T3768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 418.548122][T15326] loop9: detected capacity change from 0 to 512 [ 418.559124][ T3768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.574532][T15326] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 418.586519][ T3768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.591998][T15326] EXT4-fs (loop9): orphan cleanup on readonly fs [ 418.608457][T15326] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.3072: Block bitmap for bg 0 marked uninitialized [ 418.622105][T15326] loop9: lost filesystem error report for type 5 error -117 [ 418.622270][ T3768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 418.629638][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 418.629675][ C1] EXT4-fs (loop9): initial error at time 1771923162: ext4_read_block_bitmap_nowait:517 [ 418.629703][ C1] EXT4-fs (loop9): last error at time 1771923162: ext4_read_block_bitmap_nowait:517 [ 418.663229][T15326] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 418.677566][T15288] chnl_net:caif_netlink_parms(): no params data found [ 418.703337][T15333] loop7: detected capacity change from 0 to 736 [ 418.709808][T15326] loop9: lost filesystem error report for type 5 error -117 [ 418.712959][T15326] EXT4-fs (loop9): 1 orphan inode deleted [ 418.793635][T15326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 418.801394][T15288] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.818453][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.825979][T15288] bridge_slave_0: entered allmulticast mode [ 418.832596][T15288] bridge_slave_0: entered promiscuous mode [ 418.859136][T15288] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.872982][T15288] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.881587][T15288] bridge_slave_1: entered allmulticast mode [ 418.888585][T15288] bridge_slave_1: entered promiscuous mode [ 418.895510][ T3768] bridge_slave_1: left allmulticast mode [ 418.901349][ T3768] bridge_slave_1: left promiscuous mode [ 418.907303][ T3768] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.915796][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.933515][ T3768] bridge_slave_0: left allmulticast mode [ 418.939549][ T3768] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.040476][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3076'. [ 419.188951][T15357] loop9: detected capacity change from 0 to 512 [ 419.197063][ T3768] batman_adv: batadv0: Removing interface: macvlan2 [ 419.303070][T15357] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3076: invalid indirect mapped block 256 (level 2) [ 419.319537][T15357] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 419.319762][T15357] EXT4-fs (loop9): Remounting filesystem read-only [ 419.328971][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 419.329005][ C0] EXT4-fs (loop9): initial error at time 1771923163: ext4_free_branches:1023: inode 11 [ 419.329060][ C0] EXT4-fs (loop9): last error at time 1771923163: ext4_free_branches:1023: inode 11 [ 419.365686][T15357] EXT4-fs (loop9): 2 truncates cleaned up [ 419.372298][T15357] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.540859][T15362] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.3075'. [ 419.551499][T15362] netlink: zone id is out of range [ 419.557499][T15362] netlink: zone id is out of range [ 419.564381][T15362] netlink: zone id is out of range [ 419.572129][T15362] netlink: zone id is out of range [ 419.578069][T15362] netlink: zone id is out of range [ 419.586450][T15362] netlink: zone id is out of range [ 419.592328][T15362] netlink: zone id is out of range [ 419.598131][T15362] netlink: zone id is out of range [ 419.603858][T15362] netlink: zone id is out of range [ 419.609681][T15362] netlink: zone id is out of range [ 419.806658][ T3768] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 419.814934][ T3768] bridge4 (unregistering): left promiscuous mode [ 419.887169][ T3768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.915126][ T3768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.944159][ T3768] bond0 (unregistering): Released all slaves [ 419.954731][ T3768] bond1 (unregistering): Released all slaves [ 419.961851][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.970684][T15373] loop4: detected capacity change from 0 to 1764 [ 419.973163][ T3478] usb usb8-port1: attempt power cycle [ 419.980133][ T3768] bond2 (unregistering): Released all slaves [ 420.004360][ T3768] bond3 (unregistering): Released all slaves [ 420.015691][T15375] loop9: detected capacity change from 0 to 128 [ 420.052212][ T3768] bond4 (unregistering): Released all slaves [ 420.064590][ T3768] bond5 (unregistering): Released all slaves [ 420.073678][ T3768] bond6 (unregistering): Released all slaves [ 420.104568][ T3768] bond7 (unregistering): Released all slaves [ 420.114341][ T3768] bond8 (unregistering): Released all slaves [ 420.287254][T15288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.299300][T15288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.488451][ T3768] tipc: Left network mode [ 420.494539][T15288] team0: Port device team_slave_0 added [ 420.507529][T15288] team0: Port device team_slave_1 added [ 420.523460][ T3768] IPVS: stopping backup sync thread 4675 ... [ 420.537204][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.545779][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.578974][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.621649][ T3768] hsr_slave_0: left promiscuous mode [ 420.632584][ T3768] hsr_slave_1: left promiscuous mode [ 420.639546][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.656107][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.668928][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.683146][T15394] cgroup: Need name or subsystem set [ 420.688501][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.704878][ T3768] veth1_macvtap: left promiscuous mode [ 420.710819][ T3768] veth0_macvtap: left promiscuous mode [ 420.758933][T15391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.815623][ T3768] team_slave_1 (unregistering): left promiscuous mode [ 420.826038][ T3768] team0 (unregistering): Port device team_slave_1 removed [ 420.845117][ T3768] team_slave_0 (unregistering): left promiscuous mode [ 420.852388][ T3768] team0 (unregistering): Port device team_slave_0 removed [ 420.866572][T15403] set_capacity_and_notify: 1 callbacks suppressed [ 420.866593][T15403] loop7: detected capacity change from 0 to 128 [ 420.896292][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.896475][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.903365][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.938675][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.953612][T15403] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.966536][T15403] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.966629][T10653] lo speed is unknown, defaulting to 1000 [ 420.996270][T10653] infiniband syz2: ib_query_port failed (-19) [ 421.017216][T15288] hsr_slave_0: entered promiscuous mode [ 421.024109][T11577] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.047712][T15288] hsr_slave_1: entered promiscuous mode [ 421.120073][T15417] xt_TCPMSS: Only works on TCP SYN packets [ 421.188443][T15417] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3093'. [ 421.261608][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3090'. [ 421.296552][T15434] loop4: detected capacity change from 0 to 128 [ 421.440980][ T3768] IPVS: stop unused estimator thread 0... [ 421.540181][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3095'. [ 421.644190][T15288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.655238][T15288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.667405][T15288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.695765][T15288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.735483][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3100'. [ 421.776021][T15482] loop7: detected capacity change from 0 to 128 [ 421.794311][T15288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.808400][T15288] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.818024][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.825225][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.857729][T15288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.868764][T15288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.929544][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.936755][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.090032][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.139818][T15493] IPv6: sit1: Disabled Multicast RS [ 422.198322][T15482] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.222085][T15482] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.312638][T11577] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.317402][T15511] loop9: detected capacity change from 0 to 512 [ 422.329259][T15288] veth0_vlan: entered promiscuous mode [ 422.339825][T15288] veth1_vlan: entered promiscuous mode [ 422.356182][T15516] loop7: detected capacity change from 0 to 128 [ 422.371359][T15288] veth0_macvtap: entered promiscuous mode [ 422.399314][T15288] veth1_macvtap: entered promiscuous mode [ 422.419897][ T3478] usb usb8-port1: unable to enumerate USB device [ 422.534422][T15511] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 422.565719][T15511] EXT4-fs (loop9): orphan cleanup on readonly fs [ 422.569523][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.594679][T15511] __quota_error: 59 callbacks suppressed [ 422.594700][T15511] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 422.614779][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.632141][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.641149][T15511] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 422.650842][T15511] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.3105: Failed to acquire dquot type 1 [ 422.665017][T15511] loop9: lost filesystem error report for type 5 error -5 [ 422.665644][T15511] EXT4-fs (loop9): Remounting filesystem read-only [ 422.673010][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 422.673047][ C1] EXT4-fs (loop9): initial error at time 1771923166: ext4_acquire_dquot:7001 [ 422.673083][ C1] EXT4-fs (loop9): last error at time 1771923166: ext4_acquire_dquot:7001 [ 422.679519][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.724004][T15511] EXT4-fs (loop9): 1 truncate cleaned up [ 422.775754][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.849137][T15511] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 422.866915][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'. [ 422.958317][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3112'. [ 422.981585][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.085748][T15552] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3114'. [ 423.143138][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.232256][T15548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.241321][T15548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.260230][T15548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.269234][T15548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.400740][T15556] loop9: detected capacity change from 0 to 128 [ 423.453504][T15556] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.466742][T15568] FAULT_INJECTION: forcing a failure. [ 423.466742][T15568] name failslab, interval 1, probability 0, space 0, times 0 [ 423.481000][T15567] loop3: detected capacity change from 0 to 128 [ 423.496076][T15568] CPU: 0 UID: 0 PID: 15568 Comm: syz.4.3117 Tainted: G W syzkaller #0 PREEMPT(full) [ 423.496199][T15568] Tainted: [W]=WARN [ 423.496207][T15568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.496222][T15568] Call Trace: [ 423.496229][T15568] [ 423.496237][T15568] __dump_stack+0x1d/0x30 [ 423.496267][T15568] dump_stack_lvl+0x95/0xd0 [ 423.496294][T15568] dump_stack+0x15/0x1b [ 423.496355][T15568] should_fail_ex+0x263/0x280 [ 423.496439][T15568] ? tcf_connmark_init+0x170/0x4f0 [ 423.496461][T15568] should_failslab+0x8c/0xb0 [ 423.496485][T15568] __kmalloc_cache_noprof+0x5f/0x410 [ 423.496514][T15568] tcf_connmark_init+0x170/0x4f0 [ 423.496578][T15568] ? __pfx_tcf_connmark_init+0x10/0x10 [ 423.496600][T15568] tcf_action_init_1+0x395/0x4d0 [ 423.496724][T15568] tcf_action_init+0x29c/0x700 [ 423.496780][T15568] tc_ctl_action+0x29b/0x830 [ 423.496841][T15568] ? __pfx_tc_ctl_action+0x10/0x10 [ 423.496903][T15568] rtnetlink_rcv_msg+0x6a7/0x720 [ 423.497004][T15568] netlink_rcv_skb+0x123/0x220 [ 423.497078][T15568] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 423.497118][T15568] rtnetlink_rcv+0x1c/0x30 [ 423.497226][T15568] netlink_unicast+0x5c0/0x690 [ 423.497254][T15568] netlink_sendmsg+0x5c8/0x6f0 [ 423.497388][T15568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.497418][T15568] ____sys_sendmsg+0x5af/0x600 [ 423.497452][T15568] ___sys_sendmsg+0x195/0x1e0 [ 423.497561][T15568] __x64_sys_sendmsg+0xd4/0x160 [ 423.497637][T15568] x64_sys_call+0x194c/0x3020 [ 423.497730][T15568] do_syscall_64+0x12c/0x370 [ 423.497768][T15568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.497792][T15568] RIP: 0033:0x7f699cd1c629 [ 423.497831][T15568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.497852][T15568] RSP: 002b:00007f699b76f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.497877][T15568] RAX: ffffffffffffffda RBX: 00007f699cf95fa0 RCX: 00007f699cd1c629 [ 423.497893][T15568] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003 [ 423.497906][T15568] RBP: 00007f699b76f090 R08: 0000000000000000 R09: 0000000000000000 [ 423.497946][T15568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.497960][T15568] R13: 00007f699cf96038 R14: 00007f699cf95fa0 R15: 00007ffdcc179818 [ 423.497983][T15568] [ 423.822936][T15556] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.999064][ T28] audit: type=1400 audit(1771923167.711:9176): avc: denied { watch watch_reads } for pid=15591 comm="syz.3.3123" path="/2/file0" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 424.025462][T15592] netlink: 'syz.3.3123': attribute type 13 has an invalid length. [ 424.034601][T13200] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.081100][ T28] audit: type=1400 audit(1771923167.791:9177): avc: denied { wake_alarm } for pid=15593 comm="syz.7.3125" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 424.121431][T15592] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.128731][T15592] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.200279][ T28] audit: type=1400 audit(1771923167.911:9178): avc: denied { read } for pid=15593 comm="syz.7.3125" dev="nsfs" ino=4026532716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 424.240073][T15592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.272949][T15592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.306649][T15604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58 sclass=netlink_tcpdiag_socket pid=15604 comm=syz.3.3123 [ 424.389939][ T28] audit: type=1400 audit(1771923167.911:9179): avc: denied { open } for pid=15593 comm="syz.7.3125" path="net:[4026532716]" dev="nsfs" ino=4026532716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 424.414718][ T28] audit: type=1400 audit(1771923167.911:9180): avc: denied { create } for pid=15593 comm="syz.7.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 424.438379][T15604] loop3: detected capacity change from 0 to 512 [ 424.484369][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3123: iget: bad extra_isize 90 (inode size 256) [ 424.502508][T15604] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 424.502721][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3123: error while reading EA inode 11 err=-117 [ 424.511927][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 424.511947][ C1] EXT4-fs (loop3): initial error at time 1771923168: ext4_xattr_inode_iget:441: inode 11 [ 424.511989][ C1] EXT4-fs (loop3): last error at time 1771923168: ext4_xattr_inode_iget:441: inode 11 [ 424.555728][ T28] audit: type=1400 audit(1771923167.911:9181): avc: denied { ioctl } for pid=15593 comm="syz.7.3125" path="socket:[45251]" dev="sockfs" ino=45251 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 424.581100][ T28] audit: type=1400 audit(1771923167.911:9182): avc: denied { create } for pid=15593 comm="syz.7.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.604987][T15604] loop3: lost filesystem error report for type 5 error -117 [ 424.605327][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3123: iget: bad extra_isize 90 (inode size 256) [ 424.626472][ T28] audit: type=1400 audit(1771923167.991:9183): avc: denied { recv } for pid=15591 comm="syz.3.3123" saddr=10.128.0.163 src=30036 daddr=10.128.0.172 dest=50878 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 424.652935][T15604] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 424.653599][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3123: error while reading EA inode 11 err=-117 [ 424.683969][T15604] loop3: lost filesystem error report for type 5 error -117 [ 424.684189][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.3123: iget: bad extra_isize 90 (inode size 256) [ 424.706307][T15604] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 424.710815][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3123: error while reading EA inode 18 err=-117 [ 424.732606][T15604] loop3: lost filesystem error report for type 5 error -117 [ 424.733014][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.3123: iget: bad extra_isize 90 (inode size 256) [ 424.754243][T15604] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 424.754562][T15604] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3123: error while reading EA inode 18 err=-117 [ 424.776288][T15604] loop3: lost filesystem error report for type 5 error -117 [ 424.776664][T15604] EXT4-fs (loop3): 1 orphan inode deleted [ 424.790517][T15604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.804317][T15604] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.848705][ T3762] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.871396][ T59] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.892968][ T59] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.913243][ T59] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.013478][T15632] loop9: detected capacity change from 0 to 128 [ 425.029554][T15632] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.073110][T15632] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.167147][T15640] netlink: 'syz.7.3135': attribute type 27 has an invalid length. [ 425.188041][T13200] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.240958][T15640] veth1: left allmulticast mode [ 425.256726][T15646] loop3: detected capacity change from 0 to 2048 [ 425.331258][T15640] veth1_vlan: left allmulticast mode [ 425.336962][T15640] macvlan1: left allmulticast mode [ 425.410473][T15640] vlan2: left promiscuous mode [ 425.423616][T15640] bond1: left promiscuous mode [ 425.428689][T15640] bridge2: left promiscuous mode [ 425.435612][T15646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.452488][T15640] vlan2: left allmulticast mode [ 425.457510][T15640] bond1: left allmulticast mode [ 425.462455][T15640] bridge2: left allmulticast mode [ 425.494405][T15645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.516270][T15645] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.525723][T15645] net_ratelimit: 2 callbacks suppressed [ 425.525738][T15645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.592965][ T3754] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.604462][T15288] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.608587][ T59] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.622918][ T59] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.632038][ T59] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.676028][T15659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3143'. [ 425.695810][T15659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3143'. [ 425.884405][T15673] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.885434][T15676] set_capacity_and_notify: 1 callbacks suppressed [ 425.885450][T15676] loop7: detected capacity change from 0 to 2048 [ 425.956969][T15673] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.970940][ T3300] loop7: p4 < > [ 425.980811][T15676] loop7: p4 < > [ 425.991782][ T3000] loop7: p4 < > [ 425.999107][T15685] syzkaller0: entered promiscuous mode [ 426.004756][T15685] syzkaller0: entered allmulticast mode [ 426.021727][T15686] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3152'. [ 426.048251][T15288] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.083481][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 426.127036][T15694] loop0: detected capacity change from 0 to 512 [ 426.160894][T15694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.183099][T15694] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.234775][T15694] xt_TPROXY: Can be used only with -p tcp or -p udp [ 426.280515][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.293887][T15710] loop7: detected capacity change from 0 to 128 [ 426.313705][T15710] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.358074][T15710] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.460594][T11577] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.515761][T15720] loop9: detected capacity change from 0 to 2048 [ 426.544891][T15724] loop7: detected capacity change from 0 to 128 [ 426.566314][ T3304] Alternate GPT is invalid, using primary GPT. [ 426.572703][ T3304] loop9: p2 p3 p7 [ 426.601690][T15720] Alternate GPT is invalid, using primary GPT. [ 426.611782][T15720] loop9: p2 p3 p7 [ 427.065434][T15745] netlink: 'syz.4.3174': attribute type 3 has an invalid length. [ 427.073568][T15745] netlink: 'syz.4.3174': attribute type 3 has an invalid length. [ 427.115287][T15749] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3175'. [ 427.813701][T15770] loop3: detected capacity change from 0 to 512 [ 427.830913][T15770] vfat: Unknown parameter '' [ 428.346555][ T28] kauditd_printk_skb: 542 callbacks suppressed [ 428.346639][ T28] audit: type=1400 audit(1771923171.871:9726): avc: denied { read } for pid=15771 comm="syz.4.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 428.397908][ T28] audit: type=1400 audit(1771923171.871:9727): avc: denied { read write } for pid=15771 comm="syz.4.3182" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 428.422017][ T28] audit: type=1400 audit(1771923171.871:9728): avc: denied { open } for pid=15771 comm="syz.4.3182" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.237648][T15777] loop3: detected capacity change from 0 to 512 [ 429.258684][ T28] audit: type=1400 audit(1771923172.971:9729): avc: denied { read } for pid=15780 comm="syz.7.3186" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 429.281548][T15777] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 429.323731][ T28] audit: type=1400 audit(1771923172.971:9730): avc: denied { open } for pid=15780 comm="syz.7.3186" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 429.364399][T15777] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 429.388812][T15785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15785 comm=syz.7.3188 [ 429.413929][ T28] audit: type=1400 audit(1771923172.971:9731): avc: denied { ioctl } for pid=15780 comm="syz.7.3186" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 429.472507][ T28] audit: type=1400 audit(1771923173.041:9732): avc: denied { create } for pid=15783 comm="syz.7.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 429.514088][T15797] loop3: detected capacity change from 0 to 128 [ 429.536649][T15793] loop7: detected capacity change from 0 to 256 [ 429.565607][T15793] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3192'. [ 429.586129][ T28] audit: type=1400 audit(1771923173.301:9733): avc: denied { write } for pid=15792 comm="syz.7.3192" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 429.731341][ T28] audit: type=1400 audit(1771923173.441:9734): avc: denied { block_suspend } for pid=15801 comm="syz.3.3195" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 429.801289][T15807] loop7: detected capacity change from 0 to 8192 [ 429.853164][ T3304] loop7: p1 < > p2 p4 < p5 > [ 429.865183][ T3304] loop7: partition table partially beyond EOD, truncated [ 429.885575][ T3304] loop7: p1 start 134217728 is beyond EOD, truncated [ 429.895990][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3194'. [ 429.915248][ T3304] loop7: p2 size 591360 extends beyond EOD, truncated [ 429.954506][ T3304] loop7: p5 size 591360 extends beyond EOD, truncated [ 430.120367][T15807] loop7: p1 < > p2 p4 < p5 > [ 430.126451][T15807] loop7: partition table partially beyond EOD, truncated [ 430.140839][T15807] loop7: p1 start 134217728 is beyond EOD, truncated [ 430.147827][T15807] loop7: p2 size 591360 extends beyond EOD, truncated [ 430.173214][T15807] loop7: p5 size 591360 extends beyond EOD, truncated [ 430.188947][ T28] audit: type=1400 audit(1771923173.901:9735): avc: denied { ioctl } for pid=15814 comm="syz.3.3197" path="socket:[45560]" dev="sockfs" ino=45560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 430.289996][T15822] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3200'. [ 430.576851][T15831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.584355][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 430.590756][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 430.600586][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 430.625036][T15831] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.679184][T15836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3205'. [ 430.728446][T11577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.849558][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 430.860563][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 430.865011][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 430.917345][T15840] batadv0: entered promiscuous mode [ 430.922755][T15840] macsec1: entered promiscuous mode [ 430.980694][T15840] batadv0: left promiscuous mode [ 431.527331][ T3752] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.643134][T15861] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 431.674727][T15882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 431.680859][T15880] set_capacity_and_notify: 2 callbacks suppressed [ 431.680936][T15880] loop9: detected capacity change from 0 to 4096 [ 431.708373][T15880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.751141][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.431224][T15919] loop9: detected capacity change from 0 to 4096 [ 432.455545][T15919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.550183][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.613124][T15924] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3237'. [ 432.920249][ T3422] IPVS: starting estimator thread 0... [ 433.023311][T15934] IPVS: using max 2400 ests per chain, 120000 per kthread [ 433.194773][T15936] netlink: 'syz.3.3239': attribute type 21 has an invalid length. [ 433.277961][T15936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3239'. [ 433.387109][T15936] netlink: 'syz.3.3239': attribute type 1 has an invalid length. [ 433.430124][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 433.430143][ T28] audit: type=1400 audit(1771923177.141:9761): avc: denied { audit_read } for pid=15940 comm="syz.9.3242" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 433.512979][ T28] audit: type=1400 audit(1771923177.181:9762): avc: denied { bind } for pid=15940 comm="syz.9.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.533944][ T28] audit: type=1400 audit(1771923177.231:9763): avc: denied { setopt } for pid=15940 comm="syz.9.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.594094][T15941] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.604575][ T3580] Bluetooth: hci0: command 0x1003 tx timeout [ 433.610683][ T9241] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 433.615680][T15945] netlink: 'syz.4.3244': attribute type 16 has an invalid length. [ 433.642713][T15945] netlink: 'syz.4.3244': attribute type 17 has an invalid length. [ 433.674625][T15941] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.741054][ T28] audit: type=1400 audit(1771923177.451:9764): avc: denied { name_bind } for pid=15949 comm="syz.0.3246" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 433.787979][T15945] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.795234][T15945] bridge0: port 2(bridge_slave_1) entered listening state [ 433.802501][T15945] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.809574][T15945] bridge0: port 1(bridge_slave_0) entered listening state [ 433.839552][T15953] loop7: detected capacity change from 0 to 1024 [ 433.852600][T15953] loop7: detected capacity change from 0 to 1024 [ 434.080958][T15945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.108798][T15941] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.158670][T15961] loop4: detected capacity change from 0 to 1024 [ 434.187203][T15941] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.199616][T15961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.365125][T15970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3249'. [ 434.377322][ T3754] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.389957][T15970] vxlan0: entered promiscuous mode [ 434.405277][ T3754] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.434437][ T3754] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.508597][ T3754] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.543013][ T28] audit: type=1400 audit(1771923178.241:9765): avc: denied { getopt } for pid=15973 comm="syz.9.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.570838][T15951] FAULT_INJECTION: forcing a failure. [ 434.570838][T15951] name fail_futex, interval 1, probability 0, space 0, times 1 [ 434.655452][ T3754] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.684554][T15951] CPU: 0 UID: 0 PID: 15951 Comm: syz.0.3246 Tainted: G W syzkaller #0 PREEMPT(full) [ 434.684592][T15951] Tainted: [W]=WARN [ 434.684600][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.684612][T15951] Call Trace: [ 434.684618][T15951] [ 434.684626][T15951] __dump_stack+0x1d/0x30 [ 434.684700][T15951] dump_stack_lvl+0x95/0xd0 [ 434.684786][T15951] dump_stack+0x15/0x1b [ 434.684808][T15951] should_fail_ex+0x263/0x280 [ 434.684831][T15951] should_fail+0xb/0x20 [ 434.684853][T15951] get_futex_key+0x12f/0xbe0 [ 434.684958][T15951] futex_wake+0x84/0x380 [ 434.685018][T15951] do_futex+0x323/0x380 [ 434.685048][T15951] mm_release+0xa1/0x190 [ 434.685108][T15951] exit_mm_release+0x25/0x30 [ 434.685134][T15951] exit_mm+0x37/0x180 [ 434.685214][T15951] do_exit+0x3fa/0x15a0 [ 434.685292][T15951] do_group_exit+0xfe/0x140 [ 434.685442][T15951] ? get_signal+0xe4c/0xf60 [ 434.685549][T15951] get_signal+0xe54/0xf60 [ 434.685585][T15951] ? finish_task_switch+0x7d/0x280 [ 434.685614][T15951] arch_do_signal_or_restart+0x96/0x450 [ 434.685688][T15951] exit_to_user_mode_loop+0x6a/0x6f0 [ 434.685714][T15951] ? __x64_sys_recvmmsg+0xe5/0x170 [ 434.685755][T15951] do_syscall_64+0x249/0x370 [ 434.685824][T15951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.685897][T15951] RIP: 0033:0x7fddd13dc629 [ 434.685917][T15951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.685939][T15951] RSP: 002b:00007fddcfe16028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 434.685964][T15951] RAX: fffffffffffffe00 RBX: 00007fddd1656090 RCX: 00007fddd13dc629 [ 434.686012][T15951] RDX: 0000000000000001 RSI: 000020000000be00 RDI: 0000000000000003 [ 434.686026][T15951] RBP: 00007fddcfe16090 R08: 0000000000000000 R09: 0000000000000000 [ 434.686043][T15951] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.686134][T15951] R13: 00007fddd1656128 R14: 00007fddd1656090 R15: 00007ffcc50d8e08 [ 434.686153][T15951] [ 434.913642][ T3762] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.922919][ T3762] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.941194][ T3762] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.958311][ T28] audit: type=1400 audit(1771923178.671:9766): avc: denied { bind } for pid=15982 comm="syz.9.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.005358][T13285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.014538][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3258'. [ 435.165611][ T28] audit: type=1400 audit(1771923178.881:9767): avc: denied { execute } for pid=15984 comm="syz.0.3256" path="/50/cpu.stat" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 435.208239][ T28] audit: type=1400 audit(1771923178.921:9768): avc: denied { create } for pid=15984 comm="syz.0.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 435.228471][ T28] audit: type=1400 audit(1771923178.921:9769): avc: denied { read } for pid=15993 comm="syz.7.3261" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 435.318858][T15998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3259'. [ 435.475113][T16002] netlink: 'syz.4.3257': attribute type 13 has an invalid length. [ 435.488180][T15996] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3260'. [ 435.762550][ T28] audit: type=1400 audit(1771923178.921:9770): avc: denied { open } for pid=15993 comm="syz.7.3261" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 435.808990][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 435.817605][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 435.826117][T16014] openvswitch: netlink: Missing key (keys=40, expected=80) [ 435.841927][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 435.856803][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 435.867264][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 436.104860][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3265'. [ 436.114498][T16024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.122561][T16024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.344428][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 436.352191][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 436.359858][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 436.367438][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 436.375016][ T3422] hid-generic 0017:0001:4F5A.0017: unknown main item tag 0x0 [ 436.914554][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'. [ 436.939042][ T3422] hid-generic 0017:0001:4F5A.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 436.983634][T16034] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3269'. [ 437.304296][T16024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.311837][T16024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.323790][T16012] netlink: 'syz.0.3262': attribute type 12 has an invalid length. [ 437.332047][T16012] netlink: 'syz.0.3262': attribute type 29 has an invalid length. [ 437.340697][T16012] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3262'. [ 437.353422][T16027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.360929][T16027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.369232][T16027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.376911][T16027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.426130][T16042] loop7: detected capacity change from 0 to 512 [ 437.441695][T16042] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 437.467863][T16042] EXT4-fs (loop7): 1 truncate cleaned up [ 437.474401][T16042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.487143][T16044] loop3: detected capacity change from 0 to 8192 [ 437.506128][T11577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.553765][ T3304] loop3: p1 < > p2 p4 < p5 > [ 437.558479][ T3304] loop3: partition table partially beyond EOD, truncated [ 437.565809][ T3304] loop3: p1 start 134217728 is beyond EOD, truncated [ 437.573080][ T3304] loop3: p2 size 591360 extends beyond EOD, truncated [ 437.585192][ T3304] loop3: p5 size 591360 extends beyond EOD, truncated [ 437.599082][T16044] loop3: p1 < > p2 p4 < p5 > [ 437.604473][T16044] loop3: partition table partially beyond EOD, truncated [ 437.612045][T16044] loop3: p1 start 134217728 is beyond EOD, truncated [ 437.623161][T16044] loop3: p2 size 591360 extends beyond EOD, truncated [ 437.634506][T16044] loop3: p5 size 591360 extends beyond EOD, truncated [ 437.651721][T16053] loop4: detected capacity change from 0 to 128 [ 438.043821][T16076] loop7: detected capacity change from 0 to 512 [ 438.052672][T16076] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 438.066244][T16076] EXT4-fs (loop7): orphan cleanup on readonly fs [ 438.073029][T16076] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.3284: Block bitmap for bg 0 marked uninitialized [ 438.086550][T16076] loop7: lost filesystem error report for type 5 error -117 [ 438.086838][T16076] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 438.092854][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 438.108189][T16076] loop7: lost filesystem error report for type 5 error -117 [ 438.109360][ C1] EXT4-fs (loop7): initial error at time 1771923181: ext4_read_block_bitmap_nowait:517 [ 438.112451][T16076] EXT4-fs (loop7): 1 orphan inode deleted [ 438.116796][ C1] [ 438.116804][ C1] EXT4-fs (loop7): last error at time 1771923181: ext4_mb_clear_bb:6685 [ 438.150872][T16081] loop3: detected capacity change from 0 to 512 [ 438.151263][T16076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 438.160853][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop3 [ 438.180317][T16081] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4649: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 438.194738][T16081] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 438.197167][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop3 [ 438.225658][T11577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.275733][ T3752] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.286257][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.295265][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.304818][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 438.340580][T16092] loop7: detected capacity change from 0 to 1024 [ 438.347554][T16092] EXT4-fs: inline encryption not supported [ 438.353697][T16092] EXT4-fs: Ignoring removed nobh option [ 438.359345][T16092] EXT4-fs: Ignoring removed nobh option [ 438.365206][T16092] EXT4-fs: Ignoring removed bh option [ 438.374620][T16092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.391028][T16092] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.3290: Allocating blocks 385-513 which overlap fs metadata [ 438.406325][T16092] EXT4-fs (loop7): pa ffff888107a700e0: logic 16, phys. 129, len 24 [ 438.414400][T16092] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 438.593770][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 438.593790][ T28] audit: type=1400 audit(1771923182.311:9783): avc: denied { cmd } for pid=16102 comm="syz.0.3293" path="socket:[46033]" dev="sockfs" ino=46033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 438.656396][T16105] hsr0: entered promiscuous mode [ 438.679327][ T28] audit: type=1400 audit(1771923182.391:9784): avc: denied { mounton } for pid=16091 comm="syz.7.3290" path="/proc/593/task" dev="proc" ino=46016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 438.720538][ T28] audit: type=1400 audit(1771923182.391:9785): avc: denied { mount } for pid=16091 comm="syz.7.3290" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 438.725059][T11577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.759718][T16109] __nla_validate_parse: 1 callbacks suppressed [ 438.759737][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 438.762237][ T28] audit: type=1400 audit(1771923182.391:9786): avc: denied { associate } for pid=16091 comm="syz.7.3290" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 438.775154][T16109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3297'. [ 438.858195][ T28] audit: type=1400 audit(1771923182.571:9787): avc: denied { write } for pid=16112 comm="syz.4.3299" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 438.884309][ T28] audit: type=1400 audit(1771923182.601:9788): avc: denied { sqpoll } for pid=16112 comm="syz.4.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 438.942240][T16118] loop7: detected capacity change from 0 to 512 [ 438.964085][T16118] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 439.099136][T16123] loop0: detected capacity change from 0 to 512 [ 439.112180][T16123] vfat: Unknown parameter '' [ 439.154628][T16122] loop4: detected capacity change from 0 to 512 [ 439.215660][T16118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 439.254566][T16118] EXT4-fs (loop7): orphan cleanup on readonly fs [ 439.268094][T16122] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 439.284248][T16126] loop3: detected capacity change from 0 to 128 [ 439.290722][T16118] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3296: bad orphan inode 267 [ 439.534542][T16118] loop7: lost filesystem error report for type 5 error -117 [ 439.534882][T16118] EXT4-fs (loop7): Remounting filesystem read-only [ 439.549006][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 439.549025][ C0] EXT4-fs (loop7): initial error at time 1771923183: ext4_orphan_get:1417 [ 439.549046][ C0] EXT4-fs (loop7): last error at time 1771923183: ext4_orphan_get:1417 [ 439.709121][T16122] EXT4-fs (loop4): 1 truncate cleaned up [ 439.721519][T16122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.735327][T16118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 439.774219][T16118] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.3296: dx entry: limit 0 != root limit 125 [ 439.794705][ T28] audit: type=1400 audit(1771923183.501:9789): avc: denied { create } for pid=16120 comm="syz.4.3301" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 439.829855][T16118] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3296: Corrupt directory, running e2fsck is recommended [ 439.881389][T11577] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz-executor: dx entry: limit 0 != root limit 125 [ 439.907081][T11577] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 439.934356][T13285] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.056616][T16078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 440.233494][ T3774] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 440.405050][ T3774] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 440.486651][ T3774] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 440.511019][T16137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3306'. [ 440.523626][ T28] audit: type=1400 audit(1771923184.211:9790): avc: denied { mounton } for pid=16136 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 440.603989][ T3774] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 440.702246][ T28] audit: type=1400 audit(1771923184.411:9791): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 440.705124][T16147] SELinux: policydb version 111645657 does not match my version range 15-35 [ 440.733110][T16147] SELinux: failed to load policy [ 440.799386][ T28] audit: type=1400 audit(1771923184.421:9792): avc: denied { load_policy } for pid=16146 comm="syz.0.3307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 440.888487][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3307'. [ 440.890856][ T3774] bridge_slave_1: left allmulticast mode [ 440.912435][T16150] netlink: 71 bytes leftover after parsing attributes in process `syz.9.3308'. [ 440.915611][ T3774] bridge_slave_1: left promiscuous mode [ 440.932101][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.953611][ T3774] bridge_slave_0: left allmulticast mode [ 440.959295][ T3774] bridge_slave_0: left promiscuous mode [ 440.965512][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.033019][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 441.078432][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3307'. [ 441.199487][ T3774] bond1 (unregistering): (slave bridge2): Releasing active interface [ 441.225037][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.240538][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.250623][ T3774] bond0 (unregistering): Released all slaves [ 441.262469][ T3774] bond1 (unregistering): Released all slaves [ 441.278242][ T3774] bond2 (unregistering): (slave bond3): Releasing backup interface [ 441.286988][ T3774] bond2 (unregistering): Released all slaves [ 441.295577][ T3774] bond3 (unregistering): Released all slaves [ 441.303231][ T3752] bio_check_eod: 31346 callbacks suppressed [ 441.303245][ T3752] kworker/u8:10: attempt to access beyond end of device [ 441.303245][ T3752] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 441.383090][ T3774] IPVS: stopping backup sync thread 15191 ... [ 441.395112][T16179] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 441.425335][T16179] EXT4-fs (loop3): mount failed [ 441.434771][ T3774] hsr_slave_0: left promiscuous mode [ 441.444817][ T3774] hsr_slave_1: left promiscuous mode [ 441.490610][ T3774] team0 (unregistering): Port device macvlan1 removed [ 441.623466][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 441.644250][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 442.101660][T16136] chnl_net:caif_netlink_parms(): no params data found [ 442.239969][T16136] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.249663][T16136] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.262208][T16136] bridge_slave_0: entered allmulticast mode [ 442.272307][T16136] bridge_slave_0: entered promiscuous mode [ 442.279775][T16136] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.287568][T16136] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.310715][T16136] bridge_slave_1: entered allmulticast mode [ 442.324467][T16136] bridge_slave_1: entered promiscuous mode [ 442.474255][T16136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.484879][T16136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.616904][T16211] set_capacity_and_notify: 3 callbacks suppressed [ 442.617046][T16211] loop0: detected capacity change from 0 to 512 [ 442.641508][T16211] vfat: Unknown parameter '' [ 442.700149][T16136] team0: Port device team_slave_0 added [ 442.708291][T16136] team0: Port device team_slave_1 added [ 442.864090][T16136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.906113][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.939497][T16136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.056332][T16136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.078523][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.112465][T16136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.272408][T16136] hsr_slave_0: entered promiscuous mode [ 443.293782][T16136] hsr_slave_1: entered promiscuous mode [ 443.304534][T16136] debugfs: 'hsr0' already exists in 'hsr' [ 443.310730][T16136] Cannot create hsr debugfs directory [ 443.319221][T16221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.332599][T16221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.398331][T16221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.419125][T16221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.497339][T16221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.523038][T16221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.616511][T16221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.649760][T16221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.755529][ T3774] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.773731][ T3774] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.783135][T12610] usb usb8-port1: attempt power cycle [ 443.814350][ T3774] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.835889][ T3774] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.892529][ T3774] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.926658][ T3774] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.937723][T16242] xt_TCPMSS: Only works on TCP SYN packets [ 443.972897][ T3774] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.000887][ T3774] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.028814][T16136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.046112][T16136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.196556][T16136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.219578][T16252] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 444.440217][T16136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.481021][T16136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.488204][T16269] loop9: detected capacity change from 0 to 512 [ 444.558414][T16136] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.570948][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.578182][ T7362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.618088][T16269] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 444.656304][T16136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.699536][T16261] loop0: detected capacity change from 0 to 8192 [ 444.707241][T16269] EXT4-fs (loop9): orphan cleanup on readonly fs [ 444.727814][T16269] __quota_error: 15 callbacks suppressed [ 444.727837][T16269] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 444.736240][T16136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.744421][T16269] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 444.764130][T16269] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.3325: Failed to acquire dquot type 1 [ 444.784179][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.791505][ T7362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.800427][T16269] loop9: lost filesystem error report for type 5 error -5 [ 444.801105][T16269] EXT4-fs (loop9): Remounting filesystem read-only [ 444.808311][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 444.808345][ C0] EXT4-fs (loop9): initial error at time 1771923188: ext4_acquire_dquot:7001 [ 444.808375][ C0] EXT4-fs (loop9): last error at time 1771923188: ext4_acquire_dquot:7001 [ 444.857011][ T3304] loop0: p1 < > p2 p4 < p5 > [ 444.861783][ T3304] loop0: partition table partially beyond EOD, truncated [ 444.869327][ T3304] loop0: p1 start 134217728 is beyond EOD, truncated [ 444.873325][T16269] EXT4-fs (loop9): 1 truncate cleaned up [ 444.876281][ T3304] loop0: p2 size 591360 extends beyond EOD, truncated [ 444.894519][T16269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.908495][ T3304] loop0: p5 size 591360 extends beyond EOD, truncated [ 444.923014][T16261] loop0: p1 < > p2 p4 < p5 > [ 444.927866][T16261] loop0: partition table partially beyond EOD, truncated [ 444.935896][T16261] loop0: p1 start 134217728 is beyond EOD, truncated [ 444.943015][T16261] loop0: p2 size 591360 extends beyond EOD, truncated [ 444.943535][T16136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.960147][T16261] loop0: p5 size 591360 extends beyond EOD, truncated [ 444.968715][T13200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.043304][T16295] loop9: detected capacity change from 0 to 512 [ 445.086988][T16295] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 445.100810][ T3300] udevd[3300]: incorrect ext4 checksum on /dev/loop9 [ 445.170197][T16136] veth0_vlan: entered promiscuous mode [ 445.182660][T16306] loop9: detected capacity change from 0 to 2048 [ 445.190054][T16136] veth1_vlan: entered promiscuous mode [ 445.199434][T16306] EXT4-fs: Ignoring removed orlov option [ 445.210045][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 445.220529][T16306] EXT4-fs: Ignoring removed oldalloc option [ 445.221794][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 445.237931][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 445.250294][T16306] EXT4-fs (loop9): filesystem too large to mount safely on this system [ 445.261616][T16136] veth0_macvtap: entered promiscuous mode [ 445.273785][T16136] veth1_macvtap: entered promiscuous mode [ 445.324843][T16136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.337857][T16318] loop0: detected capacity change from 0 to 512 [ 445.356026][T16136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.366449][T16318] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3330: inode has both inline data and extents flags [ 445.390433][ T7369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.416598][ T7369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.426963][T16318] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.426963][ T28] audit: type=1400 audit(1771923189.131:9808): avc: denied { mounton } for pid=16136 comm="syz-executor" path="/root/syzkaller.z9FMZr/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 445.442838][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 445.462088][ T28] audit: type=1400 audit(1771923189.131:9809): avc: denied { mount } for pid=16136 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 445.467169][ C0] EXT4-fs (loop0): initial error at time 1771923189: ext4_orphan_get:1391: inode 15 [ 445.489915][ T28] audit: type=1400 audit(1771923189.131:9810): avc: denied { mounton } for pid=16136 comm="syz-executor" path="/root/syzkaller.z9FMZr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 445.499084][ C0] EXT4-fs (loop0): last error at time 1771923189: ext4_orphan_get:1391: inode 15 [ 445.536365][ T28] audit: type=1400 audit(1771923189.131:9811): avc: denied { mounton } for pid=16136 comm="syz-executor" path="/root/syzkaller.z9FMZr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 445.536455][T16318] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3330: couldn't read orphan inode 15 (err -117) [ 445.564633][ T3762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.585174][T16318] loop0: lost filesystem error report for type 5 error -117 [ 445.604605][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 445.608171][ T3762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.623361][T16318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.629866][T12610] usb usb8-port1: unable to enumerate USB device [ 445.657968][ T28] audit: type=1400 audit(1771923189.181:9812): avc: denied { mounton } for pid=16136 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 445.829457][ T28] audit: type=1400 audit(1771923189.541:9813): avc: denied { getopt } for pid=16350 comm="syz.3.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 445.874900][T16357] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3337'. [ 445.949581][T16355] loop4: detected capacity change from 0 to 8192 [ 445.979241][ T28] audit: type=1400 audit(1771923189.691:9814): avc: denied { mount } for pid=16317 comm="syz.0.3330" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 445.987383][T16368] loop3: detected capacity change from 0 to 512 [ 446.022535][ T3304] loop4: p1 < > p2 p4 < p5 > [ 446.027529][ T3304] loop4: partition table partially beyond EOD, truncated [ 446.041466][ T28] audit: type=1400 audit(1771923189.691:9815): avc: denied { connect } for pid=16317 comm="syz.0.3330" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 446.058192][ T3304] loop4: p1 start 134217728 is beyond EOD, truncated [ 446.097249][ T3304] loop4: p2 size 591360 extends beyond EOD, truncated [ 446.105905][ T3304] loop4: p5 size 591360 extends beyond EOD, truncated [ 446.390292][T16436] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3335'. [ 446.400643][T16436] netlink: zone id is out of range [ 446.406575][T16436] netlink: zone id is out of range [ 446.415876][T16436] netlink: zone id is out of range [ 446.423843][T16436] netlink: zone id is out of range [ 446.429564][T16436] netlink: zone id is out of range [ 446.435833][T16436] netlink: zone id is out of range [ 446.442306][T16436] netlink: zone id is out of range [ 446.448409][T16436] netlink: zone id is out of range [ 446.455805][T16436] netlink: zone id is out of range [ 446.620464][T16436] netlink: set zone limit has 8 unknown bytes [ 446.728486][T16355] loop4: p1 < > p2 p4 < p5 > [ 446.736349][T14734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.815599][T16355] loop4: partition table partially beyond EOD, truncated [ 446.857202][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'. [ 446.860205][T16355] loop4: p1 start 134217728 is beyond EOD, truncated [ 446.907057][T16355] loop4: p2 size 591360 extends beyond EOD, truncated [ 446.962287][T16355] loop4: p5 size 591360 extends beyond EOD, truncated [ 447.099891][T16467] loop2: detected capacity change from 0 to 4096 [ 447.123837][T16467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.837936][T16136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.933972][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 447.935111][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 447.967376][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 447.973225][T12610] usb usb8-port1: attempt power cycle [ 448.050964][T16516] loop3: detected capacity change from 0 to 2048 [ 448.209010][ T3305] Alternate GPT is invalid, using primary GPT. [ 448.223160][ T3305] loop3: p2 p3 p7 [ 449.309020][T16536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3363'. [ 449.339559][T16542] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3365'. [ 449.353762][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 449.368131][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 449.374339][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 449.389223][T16555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3368'. [ 449.431563][ T978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.448340][ T978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.462328][ T978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.494136][ T978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.496304][T16556] loop2: detected capacity change from 0 to 512 [ 449.617876][T16571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3371'. [ 449.638283][T16571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3371'. [ 449.692999][T16556] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 449.718954][T16563] loop4: detected capacity change from 0 to 8192 [ 449.783171][T16563] loop4: p1 < > p2 p4 < p5 > [ 449.817118][T16563] loop4: partition table partially beyond EOD, truncated [ 449.858602][T16563] loop4: p1 start 134217728 is beyond EOD, truncated [ 449.893991][T16599] loop9: detected capacity change from 0 to 128 [ 449.899436][T16563] loop4: p2 size 591360 extends beyond EOD, truncated [ 449.978727][T16563] loop4: p5 size 591360 extends beyond EOD, truncated [ 450.065296][ T3000] loop4: p1 < > p2 p4 < p5 > [ 450.085420][ T3000] loop4: partition table partially beyond EOD, truncated [ 450.111751][ T3000] loop4: p1 start 134217728 is beyond EOD, truncated [ 450.133976][ T3000] loop4: p2 size 591360 extends beyond EOD, truncated [ 450.154310][ T3000] loop4: p5 size 591360 extends beyond EOD, truncated [ 450.345002][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 450.345816][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 450.356350][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 450.366234][T16621] loop2: detected capacity change from 0 to 128 [ 450.381778][T16618] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 450.403323][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3378'. [ 450.431817][T16621] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 450.452204][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 450.464402][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 450.476123][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 450.491123][T16621] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.665248][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 450.665313][ T28] audit: type=1400 audit(1771923194.371:9819): avc: denied { create } for pid=16648 comm="syz.0.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 450.691911][T12610] usb usb8-port1: unable to enumerate USB device [ 450.739829][T16649] loop0: detected capacity change from 0 to 512 [ 450.841022][T16658] __nla_validate_parse: 2 callbacks suppressed [ 450.841140][T16658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3383'. [ 451.008223][T16136] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.936460][T16696] loop3: detected capacity change from 0 to 512 [ 451.958852][T16696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 451.990990][T16696] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 452.008666][T16696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 452.040907][T16696] EXT4-fs (loop3): 1 truncate cleaned up [ 452.048891][T16712] loop0: detected capacity change from 0 to 128 [ 452.070115][T16696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 452.113289][T16712] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.141205][T16696] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.151136][T16712] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.194597][T14734] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.328874][T16729] FAULT_INJECTION: forcing a failure. [ 452.328874][T16729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.360097][T16734] FAULT_INJECTION: forcing a failure. [ 452.360097][T16734] name failslab, interval 1, probability 0, space 0, times 0 [ 452.372975][T16729] CPU: 1 UID: 0 PID: 16729 Comm: syz.3.3399 Tainted: G W syzkaller #0 PREEMPT(full) [ 452.373053][T16729] Tainted: [W]=WARN [ 452.373061][T16729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.373076][T16729] Call Trace: [ 452.373085][T16729] [ 452.373094][T16729] __dump_stack+0x1d/0x30 [ 452.373121][T16729] dump_stack_lvl+0x95/0xd0 [ 452.373260][T16729] dump_stack+0x15/0x1b [ 452.373296][T16729] should_fail_ex+0x263/0x280 [ 452.373384][T16729] should_fail+0xb/0x20 [ 452.373402][T16729] should_fail_usercopy+0x1a/0x20 [ 452.373432][T16729] copy_folio_from_iter_atomic+0x269/0x1170 [ 452.373466][T16729] ? shmem_write_begin+0xfc/0x1f0 [ 452.373496][T16729] ? shmem_write_begin+0x135/0x1f0 [ 452.373526][T16729] generic_perform_write+0x2c1/0x490 [ 452.373570][T16729] shmem_file_write_iter+0xc5/0xf0 [ 452.373668][T16729] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 452.373700][T16729] vfs_write+0x5a6/0x9f0 [ 452.373748][T16729] ksys_write+0xdc/0x1a0 [ 452.373783][T16729] __x64_sys_write+0x40/0x50 [ 452.373881][T16729] x64_sys_call+0x27e1/0x3020 [ 452.373909][T16729] do_syscall_64+0x12c/0x370 [ 452.374018][T16729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.374046][T16729] RIP: 0033:0x7f3f6827cece [ 452.374065][T16729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 452.374087][T16729] RSP: 002b:00007f3f66d16cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.374113][T16729] RAX: ffffffffffffffda RBX: 00007f3f66d176c0 RCX: 00007f3f6827cece [ 452.374131][T16729] RDX: 0000000000100000 RSI: 00007f3f5e8f7000 RDI: 0000000000000005 [ 452.374158][T16729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.374173][T16729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 452.374189][T16729] R13: 00007f3f66d16ddc R14: 00007f3f66d16de0 R15: 00007f3f5e8f7000 [ 452.374259][T16729] [ 452.390177][T16734] CPU: 0 UID: 0 PID: 16734 Comm: syz.0.3397 Tainted: G W syzkaller #0 PREEMPT(full) [ 452.390244][T16734] Tainted: [W]=WARN [ 452.390252][T16734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.390265][T16734] Call Trace: [ 452.390273][T16734] [ 452.390282][T16734] __dump_stack+0x1d/0x30 [ 452.390311][T16734] dump_stack_lvl+0x95/0xd0 [ 452.390335][T16734] dump_stack+0x15/0x1b [ 452.390411][T16734] should_fail_ex+0x263/0x280 [ 452.390510][T16734] should_failslab+0x8c/0xb0 [ 452.390532][T16734] __kmalloc_noprof+0xb8/0x4e0 [ 452.390554][T16734] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 452.390628][T16734] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 452.390724][T16734] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 452.390856][T16734] ? selinux_capable+0x31/0x40 [ 452.390884][T16734] ? security_capable+0x7b/0x90 [ 452.390907][T16734] ? ns_capable+0x7c/0xb0 [ 452.390927][T16734] genl_rcv_msg+0x432/0x470 [ 452.390963][T16734] ? __pfx_ovs_flow_cmd_del+0x10/0x10 [ 452.390988][T16734] netlink_rcv_skb+0x123/0x220 [ 452.391071][T16734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.391171][T16734] genl_rcv+0x28/0x40 [ 452.391200][T16734] netlink_unicast+0x5c0/0x690 [ 452.391296][T16734] netlink_sendmsg+0x5c8/0x6f0 [ 452.391326][T16734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.391353][T16734] ____sys_sendmsg+0x5af/0x600 [ 452.391444][T16734] ___sys_sendmsg+0x195/0x1e0 [ 452.391481][T16734] __x64_sys_sendmsg+0xd4/0x160 [ 452.391530][T16734] x64_sys_call+0x194c/0x3020 [ 452.391557][T16734] do_syscall_64+0x12c/0x370 [ 452.391616][T16734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.391639][T16734] RIP: 0033:0x7fddd13dc629 [ 452.391656][T16734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.391753][T16734] RSP: 002b:00007fddcfe37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.391852][T16734] RAX: ffffffffffffffda RBX: 00007fddd1655fa0 RCX: 00007fddd13dc629 [ 452.391867][T16734] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 452.391881][T16734] RBP: 00007fddcfe37090 R08: 0000000000000000 R09: 0000000000000000 [ 452.391895][T16734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.391909][T16734] R13: 00007fddd1656038 R14: 00007fddd1655fa0 R15: 00007ffcc50d8e08 [ 452.391976][T16734] [ 452.815133][T16729] loop3: detected capacity change from 0 to 2048 [ 452.822436][T16730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3398'. [ 452.856308][T16729] GPT:first_usable_lbas don't match. [ 452.861739][T16729] GPT:34 != 290 [ 452.868786][T16729] GPT: Use GNU Parted to correct GPT errors. [ 452.876959][ T28] audit: type=1400 audit(1771923196.591:9820): avc: denied { read } for pid=16737 comm="syz.0.3400" path="socket:[49123]" dev="sockfs" ino=49123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 452.912755][T16729] loop3: p1 p2 p3 [ 452.968178][ T3305] ================================================================== [ 452.976309][ T3305] BUG: KCSAN: data-race in touch_atime / touch_atime [ 452.983013][ T3305] [ 452.985347][ T3305] write to 0xffff88811b9f5548 of 4 bytes by task 3300 on cpu 1: [ 452.992980][ T3305] touch_atime+0x1d7/0x330 [ 452.997408][ T3305] shmem_file_read_iter+0x477/0x540 [ 453.002617][ T3305] vfs_read+0x6c0/0x7f0 [ 453.006795][ T3305] ksys_read+0xdc/0x1a0 [ 453.010964][ T3305] __x64_sys_read+0x40/0x50 [ 453.015488][ T3305] x64_sys_call+0x2886/0x3020 [ 453.020351][ T3305] do_syscall_64+0x12c/0x370 [ 453.024957][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.030861][ T3305] [ 453.033188][ T3305] read to 0xffff88811b9f5548 of 4 bytes by task 3305 on cpu 0: [ 453.040745][ T3305] touch_atime+0x16c/0x330 [ 453.045171][ T3305] shmem_file_read_iter+0x477/0x540 [ 453.050381][ T3305] vfs_read+0x6c0/0x7f0 [ 453.054635][ T3305] ksys_read+0xdc/0x1a0 [ 453.058869][ T3305] __x64_sys_read+0x40/0x50 [ 453.063385][ T3305] x64_sys_call+0x2886/0x3020 [ 453.068073][ T3305] do_syscall_64+0x12c/0x370 [ 453.072673][ T3305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.078573][ T3305] [ 453.080895][ T3305] value changed: 0x292efd72 -> 0x2952038a [ 453.086610][ T3305] [ 453.088932][ T3305] Reported by Kernel Concurrency Sanitizer on: [ 453.095084][ T3305] CPU: 0 UID: 0 PID: 3305 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 453.105505][ T3305] Tainted: [W]=WARN [ 453.109307][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.119536][ T3305] ================================================================== [ 453.274045][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 453.285345][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 453.286268][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 453.783176][ T3512] usb usb8-port1: attempt power cycle [ 455.623071][ T3512] usb usb8-port1: unable to enumerate USB device